Browse CVEs

MEDIUM 5.3 CVE-2021-25786 An issue was discovered in QPDF version 10.0.4, allows remote attackers to execute arbitrary code via crafted .pdf file to Pl_ASCII85Decoder::write p… Qpdf Patch available Fix from $1,6002023-08-11 MEDIUM 6.5 CVE-2022-34503 QPDF v8.4.2 was discovered to contain a heap buffer overflow via the function QPDF::processXRefStream. This vulnerability allows attackers to cause a… Qpdf No fix yet Fix from $1,6002022-07-22 MEDIUM 5.5 CVE-2021-36978 QPDF 9.x through 9.1.1 and 10.x through 10.0.4 has a heap-based buffer overflow in Pl_ASCII85Decoder::write (called from Pl_AES_PDF::flush and Pl_AES… Qpdf after 10.0.4 Fix from $1,6002021-07-20 MEDIUM 5.5 CVE-2015-9252 An issue was discovered in QPDF before 7.0.0. Endless recursion causes stack exhaustion in QPDFTokenizer::resolveLiteral() in QPDFTokenizer.cc, relat… Qpdf 7.0.0+ Fix from $1,6002018-02-13 MEDIUM 5.5 CVE-2017-18183 An issue was discovered in QPDF before 7.0.0. There is an infinite loop in the QPDFWriter::enqueueObject() function in libqpdf/QPDFWriter.cc. Qpdf 7.0.0+ Fix from $1,6002018-02-13 MEDIUM 5.5 CVE-2017-18184 An issue was discovered in QPDF before 7.0.0. There is a stack-based out-of-bounds read in the function iterate_rc4 in QPDF_encryption.cc. Qpdf 7.0.0+ Fix from $1,6002018-02-13 MEDIUM 5.5 CVE-2017-18185 An issue was discovered in QPDF before 7.0.0. There is a large heap-based out-of-bounds read in the Pl_Buffer::write function in Pl_Buffer.cc. It is … Qpdf 7.0.0+ Fix from $1,6002018-02-13 MEDIUM 5.5 CVE-2017-18186 An issue was discovered in QPDF before 7.0.0. There is an infinite loop due to looping xref tables in QPDF.cc. Qpdf 7.0.0+ Fix from $1,6002018-02-13 HIGH 7.8 CVE-2017-12595 The tokenizer in QPDF 6.0.0 and 7.0.b1 is recursive for arrays and dictionaries, which allows remote attackers to cause a denial of service (stack co… Qpdf Patch available Fix from $1,9502017-08-27 MEDIUM 5.5 CVE-2017-11624 A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of service via a crafted file, related… Qpdf No fix yet Fix from $1,6002017-07-25 MEDIUM 5.5 CVE-2017-11625 A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of service via a crafted file, related… Qpdf No fix yet Fix from $1,6002017-07-25 MEDIUM 5.5 CVE-2017-11626 A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of service via a crafted file, related… Qpdf No fix yet Fix from $1,6002017-07-25 MEDIUM 5.5 CVE-2017-11627 A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of service via a crafted file, related… Qpdf No fix yet Fix from $1,6002017-07-25