CVE-2020-19470: Flowpaper PDF2JSON

Medium severity, CVSS 5.5. EPSS: 0.6% chance of exploitation in the next 30 days.

An issue has been found in function DCTStream::getChar in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to a NULL pointer dereference (invalid read of size 1) .

Affected products

• Flowpaper PDF2JSON: version 0.70 only

Published 2021-07-21. Last modified 2026-06-17.