Skip to content
OpenAdvisories

Package · Debian

php-dompdf

16 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-59941 Public exploit

    Dompdf: Uncontrolled resource consumption based on declared BMP dimensions

    Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior accept a BMP image and generates a PDF-compatible PNG based only on its declared header dimensions and never bounds width × height before the image is converted through GD. A 58-byte BMP whos…

    dompdf dompdf dompdf/dompdf php-dompdf Debian Ubuntu Packagist
  • Medium —
    CVE-2014-2383 Public exploit EPSS 39%

    DOMPDF Arbitrary File Read

    dompdf.php in dompdf before 0.6.1, when DOMPDF_ENABLE_PHP is enabled, allows context-dependent attackers to bypass chroot protections and read arbitrary files via a PHP protocol and wrappers in the input_file parameter, as demonstrated by a php://filter/read=…

    dompdf/dompdf php-dompdf Debian Packagist
  • High —
    CVE-2010-4879 Public exploit

    DOMPDF Remote File Inclusion Vulnerability

    PHP remote file inclusion vulnerability in dompdf.php in dompdf 0.6.0 beta1 allows remote attackers to execute arbitrary PHP code via a URL in the input_file parameter.

    dompdf/dompdf php-dompdf Debian Packagist