VYPR
← All advisories
High severity7.8NVD Advisory· Published Oct 18, 2021· Updated Jun 17, 2026

CVE-2021-21796

CVE-2021-21796

Description

An exploitable use-after-free vulnerability exists in the JavaScript implementation of Nitro Pro PDF. A specially crafted document can cause an object containing the path to a document to be destroyed and then later reused, resulting in a use-after-free vulnerability, which can lead to code execution under the context of the application. An attacker can convince a user to open a document to trigger this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Gonitro/Nitro PDF Pro2 versions
    cpe:2.3:a:gonitro:nitro_pro:13.31.0.605:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:gonitro:nitro_pro:13.31.0.605:*:*:*:*:*:*:*
    • cpe:2.3:a:gonitro:nitro_pro:13.33.2.645:*:*:*:*:*:*:*
  • Nitro Pro PDF/Nitro Pro PDFdescription
  • Nitro Pro PDF/Nitro Pro PDFllm-create

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.