CVE-2022-39381 Unchecked Return Value to NULL Pointer Dereference in PDFDocumentHandler.cpp

Muhammara is a node module with c/cpp bindings to modify PDF with js for node or electron based/replacement on/of galkhana/hummusjs. The package muhammara before 2.6.0; all versions of package hummus are vulnerable to Denial of Service DoS when supplied with a maliciously crafted PDF file to be...

CVE-2022-39381

Summary (CVE-2022-39381) Muhammara (and hummus) are vulnerable to Denial of Service when processing a maliciously crafted PDF appended to another file. Affected: Muhammara versions before 2.6.0; all versions of hummus. Root cause: null dereference/related DoS path in PDF handling components (PDFD...

PT-2022-24941 · Npm · Muhammara +1

Name of the Vulnerable Software and Affected Versions: muhammara versions prior to 2.6.0 hummus affected versions not specified Description: The issue is related to a Denial of Service DoS condition that occurs when a maliciously crafted PDF file is supplied to be appended to another. This can...

CVE-2022-39381 Unchecked Return Value to NULL Pointer Dereference in PDFDocumentHandler.cpp

Muhammara is a node module with c/cpp bindings to modify PDF with js for node or electron based/replacement on/of galkhana/hummusjs. The package muhammara before 2.6.0; all versions of package hummus are vulnerable to Denial of Service DoS when supplied with a maliciously crafted PDF file to be...

CVE-2022-39381 Unchecked Return Value to NULL Pointer Dereference in PDFDocumentHandler.cpp

Muhammara is a node module with c/cpp bindings to modify PDF with js for node or electron based/replacement on/of galkhana/hummusjs. The package muhammara before 2.6.0; all versions of package hummus are vulnerable to Denial of Service DoS when supplied with a maliciously crafted PDF file to be...

GHSA-FRP9-2V6R-GJ97 muhammara and hummus vulnerable to null pointer dereference on bad response object

The package muhammara before 2.6.0 and the package hummus before 1.0.111 are vulnerable to Denial of Service DoS when PDFStreamForResponse is used with invalid data...

GHSA-9CV5-4WQV-9W94 muhammara and hummus vulnerable to denial of service by NULL pointer dereference

Impact The package muhammara before 2.6.1, from 3.0.0 and before 3.1.1; all versions of package hummus are vulnerable to Denial of Service DoS when supplied with a maliciously crafted PDF file to be parsed. Patches It has been patched in 3.1.1 and has been backported to 2.6.1 Hummus has a patch i...

muhammara and hummus vulnerable to denial of service by NULL pointer dereference

Impact The package muhammara before 2.6.1, from 3.0.0 and before 3.1.1; all versions of package hummus are vulnerable to Denial of Service DoS when supplied with a maliciously crafted PDF file to be parsed. Patches It has been patched in 3.1.1 and has been backported to 2.6.1 Hummus has a patch i...

muhammara and hummus vulnerable to null pointer dereference on bad response object

The package muhammara before 2.6.0 and the package hummus before 1.0.111 are vulnerable to Denial of Service DoS when PDFStreamForResponse is used with invalid data...

CVE-2022-25892

The package muhammara before 2.6.1, from 3.0.0 and before 3.1.1; all versions of package hummus are vulnerable to Denial of Service DoS when supplied with a maliciously crafted PDF file to be parsed...

CVE-2022-25885

The package muhammara before 2.6.0; all versions of package hummus are vulnerable to Denial of Service DoS when PDFStreamForResponse is used with invalid data...

Denial of service

The package muhammara before 2.6.0; all versions of package hummus are vulnerable to Denial of Service DoS when PDFStreamForResponse is used with invalid data...

Design/Logic Flaw

The package muhammara before 2.6.1, from 3.0.0 and before 3.1.1; all versions of package hummus are vulnerable to Denial of Service DoS when supplied with a maliciously crafted PDF file to be parsed...

CVE-2022-25885

CVE-2022-25885 affects MuhammaraJS/muhammara versions prior to 2.6.0 and hummus prior to 1.0.111. The vulnerability is a Denial of Service (DoS) triggered when PDFStreamForResponse() is used with invalid data, which can cause crashes or degraded availability. Public technical details in connected...

CVE-2022-25885 Denial of Service (DoS)

The package muhammara before 2.6.0; all versions of package hummus are vulnerable to Denial of Service DoS when PDFStreamForResponse is used with invalid data...

CVE-2022-25885 Denial of Service (DoS)

The package muhammara before 2.6.0; all versions of package hummus are vulnerable to Denial of Service DoS when PDFStreamForResponse is used with invalid data...

CVE-2022-25892 Denial of Service (DoS)

The package muhammara before 2.6.1, from 3.0.0 and before 3.1.1; all versions of package hummus are vulnerable to Denial of Service DoS when supplied with a maliciously crafted PDF file to be parsed...

PT-2022-17585 · Muhammara +1 · Muhammara +1

Name of the Vulnerable Software and Affected Versions: muhammara versions prior to 2.6.0 hummus versions prior to 1.0.111 Description: The issue allows for Denial of Service DoS when the PDFStreamForResponse function is used with invalid data. Recommendations: For muhammara versions prior to 2.6....

PT-2022-17589 · Muhammara +1 · Muhammara +1

Name of the Vulnerable Software and Affected Versions: muhammara versions prior to 2.6.1 muhammara versions 3.0.0 through 3.1.0 hummus versions prior to 1.0.111 Description: The issue allows for Denial of Service DoS when a maliciously crafted PDF file is supplied to be parsed. Recommendations: F...

CVE-2022-25892 Denial of Service (DoS)

The package muhammara before 2.6.1, from 3.0.0 and before 3.1.1; all versions of package hummus are vulnerable to Denial of Service DoS when supplied with a maliciously crafted PDF file to be parsed...