Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

V0Xe1

#48748of 60,403
6.2Total CVSS
Vulnerabilities · 1
PT-2024-29894
2024-08-06
6.2
CVE-2024-42358
Pdfio
Pdfio
The issue concerns a denial of service (DOS) vulnerability in the TTF parser of the PDFio library. Maliciously crafted TTF files can cause the program to utilize 100% of the memory and enter an infinite loop, potentially leading to a heap-buffer-overflow vulnerability. This occurs due to the `nGroups` value extracted from the file, which, when altered, can cause the program to consume excessive memory and enter an infinite loop. The `read camp` function is specifically affected by this issue. Automated systems, including web servers using this library to convert PDF submissions into plaintext, are vulnerable to DOS attacks if an attacker uploads a malicious TTF file.