CVE-2018-9918

libqpdf.a in QPDF through 8.0.2 mishandles certain "expected dictionary key but found non-name object" cases, allowing remote attackers to cause a denial of…

published April 10, 2018

CVSS
—
EPSS
2%
Percentile
76.6
In the wild
Unconfirmed
What it is

libqpdf.a in QPDF through 8.0.2 mishandles certain "expected dictionary key but found non-name object" cases, allowing remote attackers to cause a denial of service (stack exhaustion), related to the QPDFObjectHandle and QPDF_Dictionary classes, because nesting in direct objects is not restricted.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01673 · 76.6th percentile
Published
2018-04-10T18:00Z
EPSS history
Timeline
  • 10 APR 18:00Z
    libqpdf.a in QPDF through 8.0.2 mishandles certain "expected dictionary key but found non-name object" cases, allowing remote attackers to cause a denial of…
    cvelistv5