What’s Vulnerable › Vulnerabilities
CVE-2019-25549: VeryPDF PCL Converter 2.7 Denial of Service via PDF Security
- Severity: medium (CVSS 5.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.1% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2026-03-21 · updated 2026-06-17
- Weakness: CWE-787
Description
VeryPDF PCL Converter 2.7 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long password string. Attackers can trigger a buffer overflow by entering a 3000-byte password in the PDF Security encryption fields, causing the application to crash when processing PCL files.
Affected products
References
- http://www.verypdf.com
- https://www.exploit-db.com/exploits/46872
- https://www.vulncheck.com/advisories/verypdf-pcl-converter-denial-of-service-via-pdf-security
Get alerted when CVE-2019-25549 or the next vulnerability affects your stack