PDF Library PdfTokenizer Functions DoS

The vulnerabilities of the functions PdfTokenizer::ReadArray, PdfTokenizer::GetNextVariant, and PdfTokenizer::ReadDataType in the PDF processing software library PoDoFo are related to uncontrolled recursion. Exploiting these vulnerabilities could allow an attacker to cause service interruptions...

OSV-2025-547 Security exception in com.alibaba.fastjson2.JSONReader.readArray

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=431584944 Crash type: Security exception Crash state: com.alibaba.fastjson2.JSONReader.readArray java.base/java.nio.charset.CharsetEncoder. java.base/java.nio.charset.CharsetEncoder...

fastjson2:JsonFuzzer: Security exception in com.alibaba.fastjson2.JSONReader.readArray

Detailed Report: https://oss-fuzz.com/testcase?key=5222228419739648 Project: fastjson2 Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanfastjson2 Platform Id: linux Crash Type: Security exception Crash Address: Crash State: com.alibaba.fastjson2.JSONReader.readArray...

PT-2023-35655 · Oracle · Java

Name of the Vulnerable Software and Affected Versions: Java affected versions not specified Description: The issue is related to a security exception in Java. It involves the java.base/java.lang.reflect.Array.newArray and java.base/java.lang.reflect.Array.newInstance functions, as well as the...

jsonpath:PathParserFuzzer: Security exception in net.minidev.json.parser.JSONParserBase.readArray

Project: https://github.com/json-path/JsonPath.git Detailed Report: https://oss-fuzz.com/testcase?key=5093293811957760 Project: jsonpath Fuzzing Engine: libFuzzer Fuzz Target: PathParserFuzzer Job Type: libfuzzerasanjsonpath Platform Id: linux Crash Type: Security exception Crash Address: Crash...

UBUNTU-CVE-2021-30470

A flaw was found in PoDoFo 0.9.7. An uncontrolled recursive call among PdfTokenizer::ReadArray, PdfTokenizer::GetNextVariant and PdfTokenizer::ReadDataType functions can lead to a stack overflow...

CVE-2021-30470

A flaw was found in PoDoFo 0.9.7. An uncontrolled recursive call among PdfTokenizer::ReadArray, PdfTokenizer::GetNextVariant and PdfTokenizer::ReadDataType functions can lead to a stack overflow...

CVE-2021-30470

A flaw was found in PoDoFo 0.9.7. An uncontrolled recursive call among PdfTokenizer::ReadArray, PdfTokenizer::GetNextVariant and PdfTokenizer::ReadDataType functions can lead to a stack overflow...

PT-2021-18744

Name of the Vulnerable Software and Affected Versions PoDoFo version 0.9.7 Description A flaw was found in the software, where an uncontrolled recursive call among PdfTokenizer::ReadArray, PdfTokenizer::GetNextVariant, and PdfTokenizer::ReadDataType functions can lead to a stack overflow...

CVE-2021-30470: Uncontrolled Recursion

A flaw was found in PoDoFo 0.9.7. An uncontrolled recursive call among PdfTokenizer::ReadArray, PdfTokenizer::GetNextVariant and PdfTokenizer::ReadDataType functions can lead to a stack overflow...

Sourceforge PoDoFo 安全漏洞

PoDoFo is a free, portable and easy to use PDF parsing, modification and creation library. An uncontrolled recursive call vulnerability exists in the PdfTokenizer::ReadArray, PdfTokenizer::GetNextVariant and PdfTokenizer::ReadDataType functions in PoDoFo version 0.9.7. An attacker could exploit...