QPDF libqpdf/QPDFWriter.cc Denial of Service Vulnerability

QPDF is a command line program capable of structuring PDFs. The program can encrypt PDF files, analyze or change the internal structure of PDF files. A security vulnerability exists in the 'QPDFWriter::unparseObject' and 'QPDFWriter::unparseChild' functions in the libqpdf/QPDFWriter.cc file in QP...

PT-2018-3927 · Qpdf +4 · Qpdf +4

Name of the Vulnerable Software and Affected Versions: QPDF version 8.2.1 Description: The issue is related to uncontrolled recursion in the libqpdf/QPDFWriter.cc component of the QPDF utility for converting PDF documents. This allows a remote attacker to cause a denial of service using a special...