https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T21:36:50.292598+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-30595 cnvd-2017-30595 2026-10-10T21:36:50.353074+00:00 cnvd-2017-30595 https://cve.radiocsirt.org/vuln/euvd-2026-77202 EUVD-2026-77202 2026-10-10T21:36:50.353117+00:00 EUVD-2026-77202 https://cve.radiocsirt.org/vuln/fkie_cve-2017-12595 fkie_cve-2017-12595 2026-10-10T21:36:50.353132+00:00

The tokenizer in QPDF 6.0.0 and 7.0.b1 is recursive for arrays and dictionaries, which allows remote attackers to cause a denial of service (stack consumption and segmentation fault) or possibly have unspecified other impact via a PDF document with a deep data structure, as demonstrated by a crash in QPDFObjectHandle::parseInternal in libqpdf/QPDFObjectHandle.cc.

 https://cve.radiocsirt.org/vuln/ghsa-q7vh-x7xx-x6hx GHSA-q7vh-x7xx-x6hx 2026-10-10T21:36:50.353164+00:00

The tokenizer in QPDF 6.0.0 and 7.0.b1 is recursive for arrays and dictionaries, which allows remote attackers to cause a denial of service (stack consumption and segmentation fault) or possibly have unspecified other impact via a PDF document with a deep data structure, as demonstrated by a crash in QPDFObjectHandle::parseInternal in libqpdf/QPDFObjectHandle.cc.

 https://cve.radiocsirt.org/vuln/gsd-2017-12595 gsd-2017-12595 2026-10-10T21:36:50.353181+00:00 gsd-2017-12595 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11289-1 openSUSE-SU-2024:11289-1 — libqpdf28-10.3.2-1.3 on GA media 2026-10-10T21:36:50.353192+00:00

libqpdf28-10.3.2-1.3 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2018:3066-1 SUSE-SU-2018:3066-1 — Security update for qpdf 2026-10-10T21:36:50.353212+00:00

Security update for qpdf

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-12595 UBUNTU-CVE-2017-12595 2026-10-10T21:36:50.353230+00:00

Affected: Ubuntu:14.04:LTS: qpdf, Ubuntu:16.04:LTS: qpdf

The tokenizer in QPDF 6.0.0 and 7.0.b1 is recursive for arrays and dictionaries, which allows remote attackers to cause a denial of service (stack consumption and segmentation fault) or possibly have unspecified other impact via a PDF document with a deep data structure, as demonstrated by a crash in QPDFObjectHandle::parseInternal in libqpdf/QPDFObjectHandle.cc.