The issue is related to a heap buffer overflow via the function `QPDF::processXRefStream`. This allows attackers to cause a Denial of Service (DoS) via a crafted PDF file. The vulnerability is associated with the lack of resource release after its valid period of exploitation.