Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the parsing process. An attacker can gain unauthorized access to sensitive information by submitting a specially crafted document that triggers the inclusion of functionality from an untrusted contro...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the memory management process. An attacker can achieve arbitrary code execution by supplying crafted input that triggers an out-of-bounds write during local execution with user interaction. Remediation Upgrade...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound due to improper handling of integer values in the process. An attacker can achieve code execution with the privileges of the user by supplying specially crafted input that triggers an integer overflow duri...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound due to improper handling of integer values in the process. An attacker can gain elevated privileges by supplying crafted input that triggers an integer overflow or wraparound, potentially leading to...