In QPDF 8.2.1, in libqpdf/QPDFWriter.cc, QPDFWriter:... · CVE-2018-18020 · GitHub Advisory Database · GitHub

In QPDF 8.2.1, in libqpdf/QPDFWriter.cc, QPDFWriter:...

Moderate severity Unreviewed Published May 13, 2022 to the GitHub Advisory Database • Updated Aug 30, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

In QPDF 8.2.1, in libqpdf/QPDFWriter.cc, QPDFWriter::unparseObject and QPDFWriter::unparseChild have recursive calls for a long time, which allows remote attackers to cause a denial of service via a crafted PDF file.

References

Published by the National Vulnerability Database

Oct 6, 2018

Published to the GitHub Advisory Database May 13, 2022

Last updated Aug 30, 2023