Ace Team

The issue is related to a NULL pointer dereference in the `setSource()` function, which can be triggered by sending a crafted PDF file. This can cause a Denial of Service (Segmentation fault) or possibly have other unspecified impacts.

An issue was discovered that can cause an invalid memory address to occur in the `adv png unfilter 8` function in `lib/png.c`. This can be triggered by sending a crafted file to a binary, allowing an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact when a victim opens a specially crafted file.

A NULL pointer dereference issue exists in the function PdfTranslator::setTarget() in pdftranslator.cpp, which occurs when creating the PdfXObject. This can be exploited to cause a Denial of Service.

The issue is related to a NULL pointer dereference in the `crop page` function. This occurs when the `GetObject()` function is called on a `pPage` object that is NULL, specifically when `pPage` has a value of 0x0. The problem arises when a crafted PDF document is processed, potentially leading to a denial of service. The vulnerability can be exploited by a remote attacker using a specially formed file.

The issue arises from the function `MP4Free()` in `mp4property.cpp`, which internally calls `free()` on an invalid pointer. This results in a SIGABRT signal being raised.

An issue exists in the function `be uint32 read()` located in `endianrw.h`, which can cause a NULL pointer dereference. This can be triggered by sending a crafted file to a binary, allowing an attacker to cause a Denial of Service or possibly have other unspecified impact when a victim opens a specially crafted file.

A buffer underwrite issue in the `get line()` function allows an attacker to write prior to the beginning of the buffer via a crafted .fig file, potentially leading to a denial of service. The vulnerability is related to a buffer operation exceeding its boundaries in memory.