CVE-2024-22641

2024-05-2800:00:00

ubuntu.com

tcpdf

redos

vulnerability

svg

parsing

6.6.5

unix

6.7 Medium

AI Score

Confidence

Low

0 Low

EPSS

Percentile

0.0%

JSON

TCPDF version 6.6.5 and before is vulnerable to ReDoS (Regular Expression
Denial of Service) if parsing an untrusted SVG file.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchtcpdf< anyUNKNOWN
ubuntu20.04noarchtcpdf< anyUNKNOWN
ubuntu22.04noarchtcpdf< anyUNKNOWN
ubuntu23.10noarchtcpdf< anyUNKNOWN
ubuntu24.04noarchtcpdf< anyUNKNOWN
ubuntu14.04noarchtcpdf< anyUNKNOWN
ubuntu16.04noarchtcpdf< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	tcpdf	< any	UNKNOWN
ubuntu	20.04	noarch	tcpdf	< any	UNKNOWN
ubuntu	22.04	noarch	tcpdf	< any	UNKNOWN
ubuntu	23.10	noarch	tcpdf	< any	UNKNOWN
ubuntu	24.04	noarch	tcpdf	< any	UNKNOWN
ubuntu	14.04	noarch	tcpdf	< any	UNKNOWN
ubuntu	16.04	noarch	tcpdf	< any	UNKNOWN