Approved changes feed: RSS · Atom
cpe:2.3:a:qpdf_project:qpdf:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Qpdf Project (93e1efd9-41b0-54e3-ae4b-e7290b2e2e91) |
|---|---|
| Product | Qpdf (df2826fe-81ee-53ff-a70e-8885fb58da84) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/qpdf |
purl2cpe | 2026-06-01 10:11:13.313894 |
pkg:deb/ubuntu/qpdf |
purl2cpe | 2026-06-01 10:11:13.313897 |
pkg:github/qpdf/qpdf |
purl2cpe | 2026-06-01 10:11:13.313900 |
pkg:rpm/centos/qpdf |
purl2cpe | 2026-06-01 10:11:13.313903 |
pkg:rpm/fedora/qpdf |
purl2cpe | 2026-06-01 10:11:13.313906 |
pkg:rpm/opensuse/qpdf |
purl2cpe | 2026-06-01 10:11:13.313908 |
pkg:sourceforge/qpdf |
purl2cpe | 2026-06-01 10:11:13.313911 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-36978 |
vulnerable | 2026-06-08 05:32:53.088536 |
Details available
QPDF 9.x through 9.1.1 and 10.x through 10.0.4 has a heap-based buffer overflow in Pl_ASCII85Decoder::write (called from Pl_AES_PDF::flush and Pl_AES_PDF::finish) when a certain downstream write fails.
Published: 2021-07-20T00:00:00.000Z
Updated: 2024-10-15T17:14:33.718Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-9918 |
vulnerable | 2026-06-08 05:12:08.354004 |
Details available
libqpdf.a in QPDF through 8.0.2 mishandles certain "expected dictionary key but found non-name object" cases, allowing remote attackers to cause a denial of service (stack exhaustion), related to the QPDFObjectHandle and QPDF_Dictionary classes, because nesting in direct objects is not restricted.
Published: 2018-04-10T18:00:00.000Z
Updated: 2024-08-05T07:24:56.362Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-18186 |
vulnerable | 2026-06-08 05:09:10.535553 |
Details available
An issue was discovered in QPDF before 7.0.0. There is an infinite loop due to looping xref tables in QPDF.cc.
Published: 2018-02-13T19:00:00.000Z
Updated: 2024-08-05T21:13:49.012Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-18185 |
vulnerable | 2026-06-08 05:09:10.535261 |
Details available
An issue was discovered in QPDF before 7.0.0. There is a large heap-based out-of-bounds read in the Pl_Buffer::write function in Pl_Buffer.cc. It is caused by an integer overflow in the PNG filter.
Published: 2018-02-13T19:00:00.000Z
Updated: 2024-08-05T21:13:49.098Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-18184 |
vulnerable | 2026-06-08 05:09:10.534929 |
Details available
An issue was discovered in QPDF before 7.0.0. There is a stack-based out-of-bounds read in the function iterate_rc4 in QPDF_encryption.cc.
Published: 2018-02-13T19:00:00.000Z
Updated: 2024-08-05T21:13:49.072Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-18183 |
vulnerable | 2026-06-08 05:09:10.534507 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-9252 |
vulnerable | 2026-06-08 05:07:13.435221 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.