CVE-2024-24246

概要

参考情報

• qpdf/qpdf · Exploit
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4WLK6ICPJUMOJNHZQWXAA5MPXG5JHZZL · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FX3D3YCNS6CQL3774OFUROLP3EM25ILC · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3N6TULMEYVCLXO47Y5W4VWCJMSB72CB · Mailing List
• lists.fedoraproject.org/archives/list/[email protected]/message/4WLK6ICPJUMOJNHZQWXAA5MPXG5JHZZL
• lists.fedoraproject.org/archives/list/[email protected]/message/FX3D3YCNS6CQL3774OFUROLP3EM25ILC
• lists.fedoraproject.org/archives/list/[email protected]/message/U3N6TULMEYVCLXO47Y5W4VWCJMSB72CB

qpdf のその他の脆弱性

• CVE-2021-25786中 5.3An issue was discovered in QPDF version 10.0.4, allows remote attackers to execute arbitrary code via crafted .pdf file to Pl_ASCII85Decoder…
• CVE-2022-34503中 6.5QPDF v8.4.2 was discovered to contain a heap buffer overflow via the function QPDF::processXRefStream. This vulnerability allows attackers t…
• CVE-2021-36978中 5.5QPDF 9.x through 9.1.1 and 10.x through 10.0.4 has a heap-based buffer overflow in Pl_ASCII85Decoder::write (called from Pl_AES_PDF::flush a…
• CVE-2018-18020低 3.3In QPDF 8.2.1, in libqpdf/QPDFWriter.cc, QPDFWriter::unparseObject and QPDFWriter::unparseChild have recursive calls for a long time, which …
• CVE-2018-9918高 7.8libqpdf.a in QPDF through 8.0.2 mishandles certain "expected dictionary key but found non-name object" cases, allowing remote attackers to c…