CVE-2023-24808

CVE-2023-24808 affects the PDFio C library (reading/writing PDFs) with a denial-of-service flaw in the pdfio parser for versions before 1.1.0. Crafted PDFs can drive the parser to 100% CPU utilization and never terminate, potentially impacting servers or processes that convert uploaded PDFs to pl...

CVE-2023-28428

CVE-2023-28428 concerns the PDFio C library (parsing code). The vulnerability exists in versions 1.1.0 and prior and is triggered when processing crafted PDFs, causing the pdfio parser to run at 100% CPU and not terminate (denial of service). A patch is available in version 1.1.1. The issue has m...