QPDF Project QPDF 6.0.0
Approved changes feed: RSS · Atom
cpe:2.3:a:qpdf_project:qpdf:6.0.0:*:*:*:*:*:*:*part: a version: 6.0.0 update: *
| Vendor | Qpdf Project (93e1efd9-41b0-54e3-ae4b-e7290b2e2e91) |
|---|---|
| Product | Qpdf (df2826fe-81ee-53ff-a70e-8885fb58da84) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/qpdf |
purl2cpe | 2026-06-01 10:11:13.314368 |
pkg:deb/ubuntu/qpdf |
purl2cpe | 2026-06-01 10:11:13.314369 |
pkg:github/qpdf/qpdf |
purl2cpe | 2026-06-01 10:11:13.314370 |
pkg:rpm/centos/qpdf |
purl2cpe | 2026-06-01 10:11:13.314372 |
pkg:rpm/fedora/qpdf |
purl2cpe | 2026-06-01 10:11:13.314373 |
pkg:rpm/opensuse/qpdf |
purl2cpe | 2026-06-01 10:11:13.314374 |
pkg:sourceforge/qpdf |
purl2cpe | 2026-06-01 10:11:13.314376 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-9210 |
vulnerable | 2026-06-08 05:10:09.453664 |
Details available
libqpdf.a in QPDF 6.0.0 allows remote attackers to cause a denial of service (infinite recursion and stack consumption) via a crafted PDF document, related to unparse functions, aka qpdf-infiniteloop3.
Published: 2017-05-23T03:56:00.000Z
Updated: 2024-08-05T17:02:43.381Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-9209 |
vulnerable | 2026-06-08 05:10:09.453144 |
Details available
libqpdf.a in QPDF 6.0.0 allows remote attackers to cause a denial of service (infinite recursion and stack consumption) via a crafted PDF document, related to QPDFObjectHandle::parseInternal, aka qpdf-infiniteloop2.
Published: 2017-05-23T03:56:00.000Z
Updated: 2024-08-05T17:02:43.015Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-9208 |
vulnerable | 2026-06-08 05:10:09.452635 |
Details available
libqpdf.a in QPDF 6.0.0 allows remote attackers to cause a denial of service (infinite recursion and stack consumption) via a crafted PDF document, related to releaseResolved functions, aka qpdf-infiniteloop1.
Published: 2017-05-23T03:56:00.000Z
Updated: 2024-08-05T17:02:44.150Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-12595 |
vulnerable | 2026-06-08 05:08:47.097069 |
Details available
The tokenizer in QPDF 6.0.0 and 7.0.b1 is recursive for arrays and dictionaries, which allows remote attackers to cause a denial of service (stack consumption and segmentation fault) or possibly have unspecified other impact via a PDF document with a deep data structure, as demonstrated by a crash in QPDFObjectHandle::parseInternal in libqpdf/QPDFObjectHandle.cc.
Published: 2017-08-27T15:00:00.000Z
Updated: 2024-08-05T18:43:55.969Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-11627 |
vulnerable | 2026-06-08 05:08:38.205389 |
Details available
A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of service via a crafted file, related to the PointerHolder function in PointerHolder.hh, aka an "infinite loop."
Published: 2017-07-25T23:00:00.000Z
Updated: 2024-08-05T18:12:40.943Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-11626 |
vulnerable | 2026-06-08 05:08:38.205066 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-11625 |
vulnerable | 2026-06-08 05:08:38.204724 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-11624 |
vulnerable | 2026-06-08 05:08:38.204300 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.