CVE-2017-18185

An issue was discovered in QPDF before 7.0.0. There is a large heap-based out-of-bounds read in the PlBuffer::write function in PlBuffer.cc. It is caused by an integer overflow in the PNG filter...

CVE-2015-9252

An issue was discovered in QPDF before 7.0.0. Endless recursion causes stack exhaustion in QPDFTokenizer::resolveLiteral in QPDFTokenizer.cc, related to the QPDF::resolve function in QPDF.cc...

CVE-2017-18184

An issue was discovered in QPDF before 7.0.0. There is a stack-based out-of-bounds read in the function iteraterc4 in QPDFencryption.cc...

CVE-2017-18186

An issue was discovered in QPDF before 7.0.0. There is an infinite loop due to looping xref tables in QPDF.cc...

CVE-2017-18185

An issue was discovered in QPDF before 7.0.0. There is a large heap-based out-of-bounds read in the PlBuffer::write function in PlBuffer.cc. It is caused by an integer overflow in the PNG filter...

CVE-2015-9252

An issue was discovered in QPDF before 7.0.0. Endless recursion causes stack exhaustion in QPDFTokenizer::resolveLiteral in QPDFTokenizer.cc, related to the QPDF::resolve function in QPDF.cc...

CVE-2017-18185

CVE-2017-18185 affects QPDF before 7.0.0. The issue is a large heap-based out-of-bounds read in Pl_Buffer::write, caused by an integer overflow in the PNG filter. Several connected advisories/documentation (e.g., SUSE, Red Hat, Ubuntu, NVD) corroborate the vulnerability and reference a qpdf commi...

CVE-2017-18184

CVE-2017-18184 affects QPDF prior to 7.0.0. The vulnerability is a stack-based out-of-bounds read in the function iterate_rc4 within QPDF_encryption.cc, as disclosed in multiple sources. The published details do not specify affected products beyond the QPDF project, nor do they provide explicit e...

CVE-2017-18183

CVE-2017-18183 affects the QPDF project (libqpdf). Affected version: before 7.0.0. The issue is an infinite loop in the QPDFWriter::enqueueObject() function in libqpdf/QPDFWriter.cc. The connected sources confirm this exact root cause and location. The documents do not provide exploitation detail...

CVE-2017-18186

CVE-2017-18186 affects QPDF before 7.0.0. The issue is an infinite loop caused by looping xref tables in QPDF.cc, as described in multiple sources (e.g., SUSE/RHEL/NASL entries). The CVE entry lists CVSS metrics: CVSSv2 base 4.3 (MEDIUM) with network attack vector and partial availability impact;...

CVE-2017-18183

An issue was discovered in QPDF before 7.0.0. There is an infinite loop in the QPDFWriter::enqueueObject function in libqpdf/QPDFWriter.cc...

CVE-2015-9252

CVE-2015-9252 concerns QPDF before 7.0.0. The issue is an endless recursion in QPDFTokenizer::resolveLiteral() related to the QPDF::resolve function in QPDF.cc, causing stack exhaustion (denial of service). Affected component is the QPDF library used by various packages; no patch/version fix deta...

CVE-2017-18184

An issue was discovered in QPDF before 7.0.0. There is a stack-based out-of-bounds read in the function iteraterc4 in QPDFencryption.cc...

CVE-2017-18186

An issue was discovered in QPDF before 7.0.0. There is an infinite loop due to looping xref tables in QPDF.cc...

CVE-2015-9252

An issue was discovered in QPDF before 7.0.0. Endless recursion causes stack exhaustion in QPDFTokenizer::resolveLiteral in QPDFTokenizer.cc, related to the QPDF::resolve function in QPDF.cc...

CVE-2017-18183

An issue was discovered in QPDF before 7.0.0. There is an infinite loop in the QPDFWriter::enqueueObject function in libqpdf/QPDFWriter.cc...

CVE-2017-18184

An issue was discovered in QPDF before 7.0.0. There is a stack-based out-of-bounds read in the function iteraterc4 in QPDFencryption.cc...

CVE-2017-18185

An issue was discovered in QPDF before 7.0.0. There is a large heap-based out-of-bounds read in the PlBuffer::write function in PlBuffer.cc. It is caused by an integer overflow in the PNG filter...

CVE-2017-18186

An issue was discovered in QPDF before 7.0.0. There is an infinite loop due to looping xref tables in QPDF.cc...

UBUNTU-CVE-2017-18185

An issue was discovered in QPDF before 7.0.0. There is a large heap-based out-of-bounds read in the PlBuffer::write function in PlBuffer.cc. It is caused by an integer overflow in the PNG filter...