https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2020-23877.htmlhttps://patchthecve.com/cve/CVE-2020-23877.htmlWed, 17 Jun 2026 03:05:01 +0000CRITICAL 9.8: pdf2xml v2.0 was discovered to contain a stack buffer overflow in the component getObjectStream.https://patchthecve.com/cve/CVE-2020-23876.htmlhttps://patchthecve.com/cve/CVE-2020-23876.htmlWed, 17 Jun 2026 03:05:01 +0000HIGH 7.5: pdf2xml v2.0 was discovered to contain a memory leak in the function TextPage::testLinkedText.https://patchthecve.com/cve/CVE-2020-23874.htmlhttps://patchthecve.com/cve/CVE-2020-23874.htmlWed, 17 Jun 2026 03:05:01 +0000CRITICAL 9.8: pdf2xml v2.0 was discovered to contain a heap-buffer overflow in the function TextPage::addAttributsNode.https://patchthecve.com/cve/CVE-2020-23873.htmlhttps://patchthecve.com/cve/CVE-2020-23873.htmlWed, 17 Jun 2026 03:05:01 +0000CRITICAL 9.8: pdf2xml v2.0 was discovered to contain a heap-buffer overflow in the function TextPage::dump.https://patchthecve.com/cve/CVE-2020-23872.htmlhttps://patchthecve.com/cve/CVE-2020-23872.htmlWed, 17 Jun 2026 03:05:01 +0000HIGH 7.5: A NULL pointer dereference in the function TextPage::restoreState of pdf2xml v2.0 allows attackers to cause a denial of service (DoS).