CVE-2023-28428 PDFio vulnerable to Denial Of Service when opening a corrupt PDF file

PDFio is a C library for reading and writing PDF files. In versions 1.1.0 and prior, a denial of service vulnerability exists in the pdfio parser. Crafted pdf files can cause the program to run at 100% utilization and never terminate. This is different from CVE-2023-24808. A patch for this issue ...

CVE-2023-28428

CVE-2023-28428 concerns the PDFio C library (parsing code). The vulnerability exists in versions 1.1.0 and prior and is triggered when processing crafted PDFs, causing the pdfio parser to run at 100% CPU and not terminate (denial of service). A patch is available in version 1.1.1. The issue has m...