CVE-2017-18185

CVE-2017-18185 affects QPDF before 7.0.0. The issue is a large heap-based out-of-bounds read in Pl_Buffer::write, caused by an integer overflow in the PNG filter. Several connected advisories/documentation (e.g., SUSE, Red Hat, Ubuntu, NVD) corroborate the vulnerability and reference a qpdf commi...

CVE-2017-18185

An issue was discovered in QPDF before 7.0.0. There is a large heap-based out-of-bounds read in the PlBuffer::write function in PlBuffer.cc. It is caused by an integer overflow in the PNG filter...