<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: aspose</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2019-5067: An uninitialized memory access vulnerability exists in the way Aspose.PDF 19.2 for C++ handles invalid parent </title><link>https://patchthecve.com/cve/CVE-2019-5067.html</link><guid>https://patchthecve.com/cve/CVE-2019-5067.html</guid><pubDate>Wed, 17 Jun 2026 02:37:04 +0000</pubDate><description>CRITICAL 9.8: An uninitialized memory access vulnerability exists in the way Aspose.PDF 19.2 for C++ handles invalid parent object pointers. A specially crafted PDF can cause a read and write from uninitialized memory, resulting in memory corruption and possibly arbitrary code execution. To trigger this vulnerabi</description></item><item><title>CVE-2019-5066: An exploitable use-after-free vulnerability exists in the way LZW-compressed streams are processed in Aspose.P</title><link>https://patchthecve.com/cve/CVE-2019-5066.html</link><guid>https://patchthecve.com/cve/CVE-2019-5066.html</guid><pubDate>Wed, 17 Jun 2026 02:37:04 +0000</pubDate><description>CRITICAL 9.8: An exploitable use-after-free vulnerability exists in the way LZW-compressed streams are processed in Aspose.PDF 19.2 for C++. A specially crafted PDF can cause a dangling heap pointer, resulting in a use-after-free condition. To trigger this vulnerability, a specifically crafted PDF document needs </description></item><item><title>CVE-2019-5042: An exploitable Use-After-Free vulnerability exists in the way FunctionType 0 PDF elements are processed in Asp</title><link>https://patchthecve.com/cve/CVE-2019-5042.html</link><guid>https://patchthecve.com/cve/CVE-2019-5042.html</guid><pubDate>Wed, 17 Jun 2026 02:37:01 +0000</pubDate><description>HIGH 8.8: An exploitable Use-After-Free vulnerability exists in the way FunctionType 0 PDF elements are processed in Aspose.PDF 19.2 for C++. A specially crafted PDF can cause a dangling heap pointer, resulting in a use-after-free. An attacker can send a malicious PDF to trigger this vulnerability.</description></item><item><title>CVE-2019-5041: An exploitable Stack Based Buffer Overflow vulnerability exists in the EnumMetaInfo function of Aspose Aspose.</title><link>https://patchthecve.com/cve/CVE-2019-5041.html</link><guid>https://patchthecve.com/cve/CVE-2019-5041.html</guid><pubDate>Wed, 17 Jun 2026 02:37:01 +0000</pubDate><description>HIGH 8.8: An exploitable Stack Based Buffer Overflow vulnerability exists in the EnumMetaInfo function of Aspose Aspose.Words library, version 18.11.0.0. A specially crafted doc file can cause a stack-based buffer overflow, resulting in remote code execution. An attacker needs to provide a malformed file to t</description></item><item><title>CVE-2019-5033: An exploitable out-of-bounds read vulnerability exists in the Number record parser of Aspose Aspose.Cells 19.1</title><link>https://patchthecve.com/cve/CVE-2019-5033.html</link><guid>https://patchthecve.com/cve/CVE-2019-5033.html</guid><pubDate>Wed, 17 Jun 2026 02:37:00 +0000</pubDate><description>HIGH 8.8: An exploitable out-of-bounds read vulnerability exists in the Number record parser of Aspose Aspose.Cells 19.1.0 library. A specially crafted XLS file can cause an out-of-bounds read, resulting in remote code execution. An attacker needs to provide a malformed file to the victim to trigger the vulne</description></item><item><title>CVE-2019-5032: An exploitable out-of-bounds read vulnerability exists in the LabelSst record parser of Aspose Aspose.Cells 19</title><link>https://patchthecve.com/cve/CVE-2019-5032.html</link><guid>https://patchthecve.com/cve/CVE-2019-5032.html</guid><pubDate>Wed, 17 Jun 2026 02:37:00 +0000</pubDate><description>HIGH 8.8: An exploitable out-of-bounds read vulnerability exists in the LabelSst record parser of Aspose Aspose.Cells 19.1.0 library. A specially crafted XLS file can cause an out-of-bounds read, resulting in remote code execution. An attacker needs to provide a malformed file to the victim to trigger the vul</description></item></channel></rss>