Vulnerability index

Browse CVEs

13 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Qpdf MEDIUM 5.3
CVE-2021-25786

An issue was discovered in QPDF version 10.0.4, allows remote attackers to execute arbitrary code via crafted .pdf file to Pl_ASCII85Decoder::write p…

Patch available
Fix from $1,600 2023-08-11
Qpdf MEDIUM 6.5
CVE-2022-34503

QPDF v8.4.2 was discovered to contain a heap buffer overflow via the function QPDF::processXRefStream. This vulnerability allows attackers to cause a…

No fix yet
Fix from $1,600 2022-07-22
Qpdf MEDIUM 5.5
CVE-2021-36978

QPDF 9.x through 9.1.1 and 10.x through 10.0.4 has a heap-based buffer overflow in Pl_ASCII85Decoder::write (called from Pl_AES_PDF::flush and Pl_AES…

Fix: after 10.0.4
Fix from $1,600 2021-07-20
Qpdf MEDIUM 5.5
CVE-2015-9252

An issue was discovered in QPDF before 7.0.0. Endless recursion causes stack exhaustion in QPDFTokenizer::resolveLiteral() in QPDFTokenizer.cc, relat…

Fix: 7.0.0+
Fix from $1,600 2018-02-13
Qpdf MEDIUM 5.5
CVE-2017-18183

An issue was discovered in QPDF before 7.0.0. There is an infinite loop in the QPDFWriter::enqueueObject() function in libqpdf/QPDFWriter.cc.

Fix: 7.0.0+
Fix from $1,600 2018-02-13
Qpdf MEDIUM 5.5
CVE-2017-18184

An issue was discovered in QPDF before 7.0.0. There is a stack-based out-of-bounds read in the function iterate_rc4 in QPDF_encryption.cc.

Fix: 7.0.0+
Fix from $1,600 2018-02-13
Qpdf MEDIUM 5.5
CVE-2017-18185

An issue was discovered in QPDF before 7.0.0. There is a large heap-based out-of-bounds read in the Pl_Buffer::write function in Pl_Buffer.cc. It is …

Fix: 7.0.0+
Fix from $1,600 2018-02-13
Qpdf MEDIUM 5.5
CVE-2017-18186

An issue was discovered in QPDF before 7.0.0. There is an infinite loop due to looping xref tables in QPDF.cc.

Fix: 7.0.0+
Fix from $1,600 2018-02-13
Qpdf HIGH 7.8
CVE-2017-12595

The tokenizer in QPDF 6.0.0 and 7.0.b1 is recursive for arrays and dictionaries, which allows remote attackers to cause a denial of service (stack co…

Patch available
Fix from $1,950 2017-08-27
Qpdf MEDIUM 5.5
CVE-2017-11624

A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of service via a crafted file, related…

No fix yet
Fix from $1,600 2017-07-25
Qpdf MEDIUM 5.5
CVE-2017-11625

A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of service via a crafted file, related…

No fix yet
Fix from $1,600 2017-07-25
Qpdf MEDIUM 5.5
CVE-2017-11626

A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of service via a crafted file, related…

No fix yet
Fix from $1,600 2017-07-25
Qpdf MEDIUM 5.5
CVE-2017-11627

A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of service via a crafted file, related…

No fix yet
Fix from $1,600 2017-07-25