Medium · 6.5 CVE-2024-8049 EUVD-2024-48906GHSA-47xc-86q6-rh6j

Telerik Document Processing Improper Handling of Memory Resources

Published Nov 13, 2024 · Updated Nov 13, 2024 · Assigned by ProgressSoftware

Vendor: Progress Software Product: Telerik Document Processing Libraries

Description

In Progress Telerik Document Processing Libraries, versions prior to 2024 Q4 (2024.4.1106), importing a document with unsupported features can lead to excessive processing, leading to excessive use of computing resources leaving the application process unavailable.

Affected products

Vendor	Product	Affected	Fixed
Progress Software	Telerik Document Processing Libraries	1.0.0 – < 2024.4.1106	2024.4.1106

References

https://docs.telerik.com/devtools/document-processing/knowledge-base/excessive-allocation-cve-2024-8049 vendor-advisory