7 matches found
SUSE CVE-2021-25786
An issue was discovered in QPDF version 10.0.4, allows remote attackers to execute arbitrary code via crafted .pdf file to PlASCII85Decoder::write parameter in libqpdf...
UBUNTU-CVE-2021-25786
An issue was discovered in QPDF version 10.0.4, allows remote attackers to execute arbitrary code via crafted .pdf file to PlASCII85Decoder::write parameter in libqpdf...
QPDF Resource Management Error Vulnerability
QPDF is a software application. A C++ library and a set of programs that examine and manipulate the structure of PDF files. A security vulnerability exists in QPDF version 10.0.4, which stems from an arbitrary code execution vulnerability in the parameter PlASCII85Decoder::write...
SUSE CVE-2021-36978
QPDF 9.x through 9.1.1 and 10.x through 10.0.4 has a heap-based buffer overflow in PlASCII85Decoder::write called from PlAESPDF::flush and PlAESPDF::finish when a certain downstream write fails...
PT-2023-12077
Name of the Vulnerable Software and Affected Versions QPDF version 10.0.4 Description An issue was discovered in QPDF, allowing remote attackers to execute arbitrary code via a crafted .pdf file. The Pl ASCII85Decoder::write parameter in libqpdf is vulnerable to this attack. Recommendations For...
PT-2020-22177
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow write error. The crash state indicates involvement of the Pl ASCII85Decoder::write, Pl AES PDF::flush, and P...
qpdf:qpdf_fuzzer: Heap-buffer-overflow in Pl_ASCII85Decoder::write
Project: https://github.com/qpdf/qpdf.git Detailed Report: https://oss-fuzz.com/testcase?key=5162370603286528 Project: qpdf Fuzzing Engine: afl Fuzz Target: qpdffuzzer Job Type: aflasanqpdf Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x615001bbabca Crash State:...