Skip to content
OpenAdvisories
Unscored DLA-3548-1 3 CVEs

qpdf - security update

Published Aug 29, 2023 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 10 qpdf 8.4.0-2+deb10u1

Vulnerabilities 3

  • Unscored —

    In QPDF 8.2.1, in libqpdf/QPDFWriter.cc, QPDFWriter::unparseObject and QPDFWriter::unparseChild have recursive calls fo…

  • Unscored —

    An issue was discovered in QPDF version 10.0.4, allows remote attackers to execute arbitrary code via crafted .pdf file…

  • Unscored —

    QPDF 9.x through 9.1.1 and 10.x through 10.0.4 has a heap-based buffer overflow in Pl_ASCII85Decoder::write (called fro…