CVE-2022-34503

QPDF v8.4.2 was discovered to contain a heap buffer overflow via the function QPDF::processXRefStream

published July 22, 2022

CVSS
—
EPSS
1%
Percentile
55.5
In the wild
Unconfirmed
What it is

QPDF v8.4.2 was discovered to contain a heap buffer overflow via the function QPDF::processXRefStream. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00782 · 55.5th percentile
Published
2022-07-22T14:17Z
EPSS history
Timeline
  • 22 JUL 14:17Z
    QPDF v8.4.2 was discovered to contain a heap buffer overflow via the function QPDF::processXRefStream
    cvelistv5