← Vulnerability feed

Vulnerability record · CVE-2020-10223 · published 8 March 2020

CVE-2020-10223: Gonitro nitro pro out-of-bounds write vulnerability

Gonitro · Nitro Pro

npdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to JBIG2Decode CNxJBIG2DecodeStream Heap Corruption at npdf!CAPPDAnnotHandlerUtils::create_popup_for_markup+0x12fbe via a crafted PDF document.

8.1 CVSS 3.1 High EPSS 2.5% · top 16.0% CWE-787 · Out-of-bounds write
8.1CVSS 3.1 base score, v2 5.8
2.5%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References, 4 tagged exploit
17 Jun 2026Last modified by NVD

Description

npdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to JBIG2Decode CNxJBIG2DecodeStream Heap Corruption at npdf!CAPPDAnnotHandlerUtils::create_popup_for_markup+0x12fbe via a crafted PDF document.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/nafiez/nafiez.github.io/blob/master/_posts/2020-03-05-fuzzing-heap-corruption-nitro-pdf-vulnerability ExploitThird Party Advisory
https://nafiez.github.io/security/vulnerability/corruption/fuzzing/2020/03/05/fuzzing-heap-corruption-nitro-pdf-vulnerab ExploitThird Party Advisory
https://github.com/nafiez/nafiez.github.io/blob/master/_posts/2020-03-05-fuzzing-heap-corruption-nitro-pdf-vulnerability ExploitThird Party Advisory
https://nafiez.github.io/security/vulnerability/corruption/fuzzing/2020/03/05/fuzzing-heap-corruption-nitro-pdf-vulnerab ExploitThird Party Advisory

Track CVE-2020-10223 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.8CVE-2020-6146Nitro Pro heap buffer overflow in ICCBased colorspace stroke renderingNitro Pro 13.13.2.242 and 13.16.2.300 contain a heap-based buffer overflow when rendering a page and selecting the stroke color from an ICCBased colo…EPSS 76%analysed8.8CVE-2020-6074Gonitro nitro pro use after free vulnerabilityAn exploitable code execution vulnerability exists in the PDF parser of Nitro Pro 13.9.1.155. A specially crafted PDF document can cause a use-after-…EPSS 41%8.8CVE-2017-7442Gonitro nitro pro path traversal vulnerabilityNitro Pro 11.0.3.173 allows remote attackers to execute arbitrary code via saveAs and launchURL calls with directory traversal sequences.EPSS 41%8.1CVE-2020-10222Gonitro nitro pro vulnerabilitynpdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to Heap Corruption at npdf!nitro::get_property+2381 via a crafted PDF document.EPSS 2.5%7.8CVE-2021-21796Gonitro nitro pro use after free vulnerabilityAn exploitable use-after-free vulnerability exists in the JavaScript implementation of Nitro Pro PDF. A specially crafted document can cause an objec…EPSS 16%7.8CVE-2021-21797Gonitro nitro pro double free vulnerabilityAn exploitable double-free vulnerability exists in the JavaScript implementation of Nitro Pro PDF. A specially crafted document can cause a reference…EPSS 15%7.8CVE-2021-21798Gonitro nitro pro vulnerabilityAn exploitable return of stack variable address vulnerability exists in the JavaScript implementation of Nitro Pro PDF. A specially crafted document …EPSS 16%7.8CVE-2020-6113Nitro Pro PDF object stream integer overflow leads to code executionNitro Pro 13.13.2.242 mishandles size calculation when updating its cross-reference table while parsing an object stream in a PDF. An integer overflo…EPSS 65%analysed

Source: NIST National Vulnerability Database (record CVE-2020-10223), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.