Lucene search
+L

57 matches found

NVD
NVD
•added 2024/08/06 5:15 p.m.•45 views

CVE-2024-42358

PDFio is a simple C library for reading and writing PDF files. There is a denial of service DOS vulnerability in the TTF parser. Maliciously crafted TTF files can cause the program to utilize 100% of the Memory and enter an infinite loop. This can also lead to a heap-buffer-overflow vulnerability...

6.2CVSS0.00321EPSS
SaveExploits1References2
OSV
OSV
•added 2024/08/06 5:15 p.m.•12 views

DEBIAN-CVE-2024-42358

PDFio is a simple C library for reading and writing PDF files. There is a denial of service DOS vulnerability in the TTF parser. Maliciously crafted TTF files can cause the program to utilize 100% of the Memory and enter an infinite loop. This can also lead to a heap-buffer-overflow vulnerability...

5.5CVSS5.5AI score0.00321EPSS
SaveExploits1References1
OSV
OSV
•added 2024/08/06 5:15 p.m.•16 views

UBUNTU-CVE-2024-42358

PDFio is a simple C library for reading and writing PDF files. There is a denial of service DOS vulnerability in the TTF parser. Maliciously crafted TTF files can cause the program to utilize 100% of the Memory and enter an infinite loop. This can also lead to a heap-buffer-overflow vulnerability...

6.2CVSS5.8AI score0.00321EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/08/06 5:02 p.m.•22 views

CVE-2024-42358 Loop with Unreachable Exit Condition ('Infinite Loop') in pdfio

PDFio is a simple C library for reading and writing PDF files. There is a denial of service DOS vulnerability in the TTF parser. Maliciously crafted TTF files can cause the program to utilize 100% of the Memory and enter an infinite loop. This can also lead to a heap-buffer-overflow vulnerability...

6.2CVSS7AI score0.00321EPSS
SaveExploits1References2
Debian CVE
Debian CVE
•added 2024/08/06 5:02 p.m.•86 views

CVE-2024-42358

PDFio is a simple C library for reading and writing PDF files. There is a denial of service DOS vulnerability in the TTF parser. Maliciously crafted TTF files can cause the program to utilize 100% of the Memory and enter an infinite loop. This can also lead to a heap-buffer-overflow vulnerability...

6.2CVSS5.5AI score0.00321EPSS
SaveExploits1
Cvelist
Cvelist
•added 2024/08/06 5:02 p.m.•50 views

CVE-2024-42358 Loop with Unreachable Exit Condition ('Infinite Loop') in pdfio

PDFio is a simple C library for reading and writing PDF files. There is a denial of service DOS vulnerability in the TTF parser. Maliciously crafted TTF files can cause the program to utilize 100% of the Memory and enter an infinite loop. This can also lead to a heap-buffer-overflow vulnerability...

6.2CVSS0.00321EPSS
SaveExploits1References2
CVE
CVE
•added 2024/08/06 5:02 p.m.•78 views

CVE-2024-42358

PDFio contains a denial-of-service vulnerability in its TTF parser. A crafted TrueType font can trigger an infinite loop in read_camp by manipulating nGroups, causing 100% memory usage and a heap-buffer-overflow. The ttf.h component is implicated; impact is local and leads to DOS if exploited thr...

6.2CVSS7.3AI score0.00321EPSS
SaveExploits1References2Affected Software1
OSV
OSV
•added 2024/08/06 5:02 p.m.•29 views

CVE-2024-42358 Loop with Unreachable Exit Condition ('Infinite Loop') in pdfio

PDFio is a simple C library for reading and writing PDF files. There is a denial of service DOS vulnerability in the TTF parser. Maliciously crafted TTF files can cause the program to utilize 100% of the Memory and enter an infinite loop. This can also lead to a heap-buffer-overflow vulnerability...

6.2CVSS6.7AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/06 12:00 a.m.•2 views

CVE-2024-42358: Loop with Unreachable Exit Condition

PDFio is a simple C library for reading and writing PDF files. There is a denial of service DOS vulnerability in the TTF parser. Maliciously crafted TTF files can cause the program to utilize 100% of the Memory and enter an infinite loop. This can also lead to a heap-buffer-overflow vulnerability...

6.2CVSS5.7AI score0.00321EPSS
SaveExploits1References1
Veracode
Veracode
•added 2023/03/23 1:22 a.m.•16 views

Denial Of Service (DoS)

PDFio is vulnerable to Denial Of Service DoS. The vulnerability exists due to the inflate stream logic in the streamread function of pdfio-stream.c, which allows an attacker to cause PDFio to never exit by parsing a maliciously crafted pdf file...

6.2CVSS4.4AI score0.00221EPSS
SaveExploits0References2Affected Software2
NVD
NVD
•added 2023/03/20 3:15 p.m.•21 views

CVE-2023-28428

PDFio is a C library for reading and writing PDF files. In versions 1.1.0 and prior, a denial of service vulnerability exists in the pdfio parser. Crafted pdf files can cause the program to run at 100% utilization and never terminate. This is different from CVE-2023-24808. A patch for this issue ...

6.2CVSS5.5AI score0.00221EPSS
SaveExploits0References2
OSV
OSV
•added 2023/03/20 3:15 p.m.•9 views

DEBIAN-CVE-2023-28428

PDFio is a C library for reading and writing PDF files. In versions 1.1.0 and prior, a denial of service vulnerability exists in the pdfio parser. Crafted pdf files can cause the program to run at 100% utilization and never terminate. This is different from CVE-2023-24808. A patch for this issue ...

3.3CVSS5.2AI score0.00221EPSS
SaveExploits0References1
Prion
Prion
•added 2023/03/20 3:15 p.m.•21 views

Denial of service

PDFio is a C library for reading and writing PDF files. In versions 1.1.0 and prior, a denial of service vulnerability exists in the pdfio parser. Crafted pdf files can cause the program to run at 100% utilization and never terminate. This is different from CVE-2023-24808. A patch for this issue ...

1.9CVSS4.8AI score0.00719EPSS
SaveExploits1References2Affected Software1
UbuntuCve
UbuntuCve
•added 2023/03/20 3:15 p.m.•26 views

CVE-2023-28428

PDFio is a C library for reading and writing PDF files. In versions 1.1.0 and prior, a denial of service vulnerability exists in the pdfio parser. Crafted pdf files can cause the program to run at 100% utilization and never terminate. This is different from CVE-2023-24808. A patch for this issue ...

6.2CVSS6.5AI score0.00221EPSS
SaveExploits0References3
OSV
OSV
•added 2023/03/20 3:15 p.m.•13 views

UBUNTU-CVE-2023-28428

PDFio is a C library for reading and writing PDF files. In versions 1.1.0 and prior, a denial of service vulnerability exists in the pdfio parser. Crafted pdf files can cause the program to run at 100% utilization and never terminate. This is different from CVE-2023-24808. A patch for this issue ...

6.2CVSS5.8AI score0.00221EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2023/03/20 2:51 p.m.•36 views

CVE-2023-28428 PDFio vulnerable to Denial Of Service when opening a corrupt PDF file

PDFio is a C library for reading and writing PDF files. In versions 1.1.0 and prior, a denial of service vulnerability exists in the pdfio parser. Crafted pdf files can cause the program to run at 100% utilization and never terminate. This is different from CVE-2023-24808. A patch for this issue ...

6.2CVSS6.3AI score0.00221EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2023/03/20 2:51 p.m.•32 views

CVE-2023-28428

PDFio is a C library for reading and writing PDF files. In versions 1.1.0 and prior, a denial of service vulnerability exists in the pdfio parser. Crafted pdf files can cause the program to run at 100% utilization and never terminate. This is different from CVE-2023-24808. A patch for this issue ...

6.2CVSS5AI score0.00221EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2023/03/20 2:51 p.m.•14 views

CVE-2023-28428 PDFio vulnerable to Denial Of Service when opening a corrupt PDF file

PDFio is a C library for reading and writing PDF files. In versions 1.1.0 and prior, a denial of service vulnerability exists in the pdfio parser. Crafted pdf files can cause the program to run at 100% utilization and never terminate. This is different from CVE-2023-24808. A patch for this issue ...

6.2CVSS6.1AI score0.00221EPSS
SaveExploits0References2
CVE
CVE
•added 2023/03/20 2:51 p.m.•106 views

CVE-2023-28428

CVE-2023-28428 concerns the PDFio C library (parsing code). The vulnerability exists in versions 1.1.0 and prior and is triggered when processing crafted PDFs, causing the pdfio parser to run at 100% CPU and not terminate (denial of service). A patch is available in version 1.1.1. The issue has m...

6.2CVSS4.8AI score0.00221EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2023/03/20 2:51 p.m.•26 views

CVE-2023-28428 PDFio vulnerable to Denial Of Service when opening a corrupt PDF file

PDFio is a C library for reading and writing PDF files. In versions 1.1.0 and prior, a denial of service vulnerability exists in the pdfio parser. Crafted pdf files can cause the program to run at 100% utilization and never terminate. This is different from CVE-2023-24808. A patch for this issue ...

6.2CVSS5.5AI score
SaveExploits0References4
Rows per page
Query Builder