CVE-2024-24246

all versions

Heap Buffer Overflow vulnerability in qpdf 11.9.0 allows attackers to crash the application via the std::__shared_count() function

5.5MEDIUM

CVE-2021-25786

all versions

An issue was discovered in QPDF version 10.0.4, allows remote attackers to execute arbitrary code via crafted .pdf file to Pl_ASCI

5.3MEDIUM

CVE-2022-34503

all versions

QPDF v8.4.2 was discovered to contain a heap buffer overflow via the function QPDF::processXRefStream. This vulnerability allows a

6.5MEDIUM

CVE-2021-36978

>= 9.0.0 and <= 9.1.1

QPDF 9.x through 9.1.1 and 10.x through 10.0.4 has a heap-based buffer overflow in Pl_ASCII85Decoder::write (called from Pl_AES_PD

5.5MEDIUM

CVE-2018-18020

all versions

In QPDF 8.2.1, in libqpdf/QPDFWriter.cc, QPDFWriter::unparseObject and QPDFWriter::unparseChild have recursive calls for a long ti

3.3LOW

CVE-2018-9918

<= 8.0.2

libqpdf.a in QPDF through 8.0.2 mishandles certain "expected dictionary key but found non-name object" cases, allowing remote atta

7.8HIGH

CVE-2017-18186

< 7.0.0

An issue was discovered in QPDF before 7.0.0. There is an infinite loop due to looping xref tables in QPDF.cc.

5.5MEDIUM

CVE-2017-18185

< 7.0.0

An issue was discovered in QPDF before 7.0.0. There is a large heap-based out-of-bounds read in the Pl_Buffer::write function in P

5.5MEDIUM

CVE-2017-18184

< 7.0.0

An issue was discovered in QPDF before 7.0.0. There is a stack-based out-of-bounds read in the function iterate_rc4 in QPDF_encryp

5.5MEDIUM

CVE-2017-18183

< 7.0.0

An issue was discovered in QPDF before 7.0.0. There is an infinite loop in the QPDFWriter::enqueueObject() function in libqpdf/QPD

5.5MEDIUM

CVE-2015-9252

< 7.0.0

An issue was discovered in QPDF before 7.0.0. Endless recursion causes stack exhaustion in QPDFTokenizer::resolveLiteral() in QPDF

5.5MEDIUM

CVE-2017-12595

all versions

The tokenizer in QPDF 6.0.0 and 7.0.b1 is recursive for arrays and dictionaries, which allows remote attackers to cause a denial o

7.8HIGH

CVE-2017-11627

all versions

A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of service via a cr

5.5MEDIUM

CVE-2017-11626

all versions

A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of service via a cr

5.5MEDIUM

CVE-2017-11625

all versions

A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of service via a cr

5.5MEDIUM

CVE-2017-11624

all versions

A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of service via a cr

5.5MEDIUM

CVE-2017-9210

all versions

libqpdf.a in QPDF 6.0.0 allows remote attackers to cause a denial of service (infinite recursion and stack consumption) via a craf

5.5MEDIUM

CVE-2017-9209

all versions

libqpdf.a in QPDF 6.0.0 allows remote attackers to cause a denial of service (infinite recursion and stack consumption) via a craf

5.5MEDIUM

CVE-2017-9208

all versions

libqpdf.a in QPDF 6.0.0 allows remote attackers to cause a denial of service (infinite recursion and stack consumption) via a craf

5.5MEDIUM