Huang Wenjie

The issue allows an application crash due to uncaught exceptions when parsing a specially crafted JPEG file, potentially leading to a denial of service attack against services using the metadata-extractor library.

The issue allows an attacker to cause a denial of service by allocating large amounts of memory when reading a specially crafted JPEG file, potentially affecting services that use the metadata-extractor library. This can lead to an out-of-memory error even with very small inputs.

The issue is related to an out-of-memory error via the component `readStreamBytesRaw`, which allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.

A stack-based buffer overflow was discovered in the component `ByteBuffer.append`, which allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.

The issue allows attackers to cause a Denial of Service (DoS) via a crafted PDF file, exploiting an out-of-bounds exception in the `ARCFOUREncryption.encryptARCFOUR` component. The vendor does not view this as a vulnerability and has not found it to be exploitable.