Skip to content
OpenAdvisories

Package · crates.io

oxidize-pdf

1 known vulnerabilities.

1 result · Feed

  • Medium 4.3

    oxidize-pdf: NaN/inf bypass in colour content-stream emission causes PDF rejection (DoS)

    ### Impact `oxidize-pdf` defines `Color` as a `pub enum` with public tuple-struct variants `Rgb(f64, f64, f64)`, `Gray(f64)`, and `Cmyk(f64, f64, f64, f64)`. The constructors `Color::rgb`, `Color::gray`, and `Color::cmyk` clamp incoming components to `[0.0, 1…