Skip to content
OpenAdvisories

Package · crates.io

lopdf

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    GHSA-6fj4-rcr3-r7rr

    lopdf has a stack overflow via deeply nested PDF objects

    `lopdf::Document::load_mem` (and the other `load*` entry points) parses nested PDF arrays and dictionaries with unbounded recursion. A small crafted PDF whose Catalog contains a deeply nested array (`/X [[[ … ]]]`, on the order of 10,000 levels) exhausts the …

    lopdf crates.io