Out of Bounds Write Vulnerability in PDF Rendering for Third-Party Libraries
CVE-2025-5099

9.8CRITICAL

Key Information:

Vendor

Mobile Dynamix

Status
Printershare Mobile Print
Vendor
CVE Published:
23 May 2025

What is CVE-2025-5099?

An Out of Bounds Write vulnerability can be exploited during the native library's PDF rendering process, allowing attackers to manipulate memory operations. This exposure could result in memory corruption and potentially permit the execution of arbitrary code, posing significant security risks to systems utilizing this native PDF rendering library.

Affected Version(s)

PrinterShare Mobile Print Android 12.15.01

References

https://korelogic.com/Resources/Advisories/KL-001-2025-00...
third-party-advisory

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

This vulnerability was discovered by Felix Segoviano of KoreLogic, Inc.
.