PT-2026-29175

Summary The DecodeStream.ensureBuffer method in @pdfme/pdf-lib doubles its internal buffer without any upper bound on the decompressed size. A crafted PDF containing a FlateDecode stream with a high compression ratio decompression bomb causes unbounded memory allocation during stream decoding,...

PT-2025-34466 · Git · Clamav

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=428754704 Crash type: Invalid-free Crash state: pdf decodestream pdf extract obj cli pdf...

CVE-2024-34408

Tencent libpag through 4.3.51 has an integer overflow in DecodeStream::checkEndOfFile in codec/utils/DecodeStream.cpp via a crafted PAG Portable Animated Graphics file...

Tencent Libpag Integer Overflow Vulnerability

Tencent Libpag is an official rendering library for PAG Portable Animated Graphics files from Tencent, a Chinese company. Tencent Libpag suffers from an integer overflow vulnerability that stems from the DecodeStream checkEndOfFile function in codec/utils/DecodeStream.cpp not correctly handling t...

CVE-2024-34408

Tencent libpag through 4.3.51 has an integer overflow in DecodeStream::checkEndOfFile in codec/utils/DecodeStream.cpp via a crafted PAG Portable Animated Graphics file...

CVE-2024-34408

Tencent libpag through 4.3.51 has an integer overflow in DecodeStream::checkEndOfFile in codec/utils/DecodeStream.cpp via a crafted PAG Portable Animated Graphics file...

CVE-2024-34408

Tencent libpag through 4.3.51 has an integer overflow in DecodeStream::checkEndOfFile in codec/utils/DecodeStream.cpp via a crafted PAG Portable Animated Graphics file...

CVE-2024-34408

Tencent libpag through 4.3.51 has an integer overflow in DecodeStream::checkEndOfFile in codec/utils/DecodeStream.cpp via a crafted PAG Portable Animated Graphics file...

CVE-2024-34408: Heap-based Buffer Overflow

Tencent libpag through 4.3.51 has an integer overflow in DecodeStream::checkEndOfFile in codec/utils/DecodeStream.cpp via a crafted PAG Portable Animated Graphics file...

CVE-2024-34408

Tencent libpag (an official rendering library for PAG files) versions through 4.3.51 are vulnerable to an integer overflow . The flaw exists in the DecodeStream::checkEndOfFile() function within codec/utils/DecodeStream.cpp, where the software fails to correctly handle associated integers when pr...

Tencent Libpager security vulnerabilities

Tencent Libpag is an official rendering library for PAG Portable Animated Graphics files from Tencent, a Chinese company. Tencent Libpag suffers from an integer overflow vulnerability that stems from the DecodeStream checkEndOfFile function in codec/utils/DecodeStream.cpp not correctly handling t...