Summary
It was discovered that QPDF incorrectly handled certain memory operations
when decoding JSON files. If a user or automated system were tricked into
processing a specially crafted JSON file, QPDF could be made to crash,
resulting in a denial of service, or possibly execute arbitrary code.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 23.10 | qpdf | 11.5.0-1ubuntu1.1 |
References
-
report
https://ubuntu.com/security/CVE-2024-24246