Known vulnerabilities in QPDF
Vendor:
SourceForge
Software:
QPDF
Software CPE:
cpe:2.3:a:sourceforge:qpdf:*:*:*:*:*:*:*:*
Website:
https://sourceforge.net/
Total vulnerabilities:
18
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
12.3.2
12.3.1
12.3.0
12.2.0
12.1.0
12.0.0
11.10.1
11.10.0
11.9.1
11.9.0
11.8.0
11.7.0
11.6.4
11.6.3
11.6.2
11.6.1
11.6.0
11.5.0
11.4.0
11.3.0
11.2.0
11.1.1
11.1.0
11.0.0
10.6.3
10.6.2
10.6.1
10.6.0
10.5.0
10.4.0
10.3.2
10.3.1
10.3.0
10.2.0
10.1.0
10.0.4
10.0.3
10.0.2
10.0.1
10.0.0
9.1.1
9.1.0
9.0.2
9.0.1
9.0.0
8.4.1
8.4.0
8.3.0
8.2.0
8.1.0
7.1.1
7.1.0
5.1.3
5.1.2
5.1.1
5.1.0
5.0.1
5.0.0
4.2.0
4.1.0
4.0.1
4.0.0
3.0.2
3.0.1
3.0.0
2.3.1
2.3.0
2.2.4
2.2.3
2.2.2
2.2.1
2.2.0
2.1.5
2.1.4
2.1.3
2.1.2
2.1.1
2.1
2.0.6
2.0.5
2.0.4
2.0.3
2.0.2
2.0.1
2.0
8.4.2
8.2.1
8.0.a1
8.0.rc1
8.0.rc2
8.0.rc3
8.0.0
8.0.1
8.0.2
7.0.b1
5.2.0
6.0.0
7.0.0
Vulnerabilities (18)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU87162 - Heap-based Buffer Overflow CVE-2024-24246 |
CWE-122 | Low | - | 06.03.2024 | - | ||
| #VU66596 - Heap-based Buffer Overflow CVE-2022-34503 |
CWE-122 | High | 9.0.0 | 17.08.2022 |
SB2022081758 SB2022081759 SB2022081760 and 4 more |
||
| #VU66595 - Heap-based Buffer Overflow CVE-2021-36978 |
CWE-122 | High | 10.5.0 | 17.08.2022 |
SB2021072930 SB2022081759 SB2022081760 and 4 more |
||
| #VU36557 - Improper input validation CVE-2018-18020 |
CWE-20 | Low | - | 06.10.2018 | - | ||
| #VU12631 - Resource exhaustion CVE-2018-9918 |
CWE-400 | Low | - | 14.05.2018 | - | ||
| #VU12630 - Resource exhaustion CVE-2017-9210 |
CWE-400 | Low | - | 14.05.2018 | - | ||
| #VU12629 - Resource exhaustion CVE-2017-9209 |
CWE-400 | Low | - | 14.05.2018 | - | ||
| #VU12628 - Resource exhaustion CVE-2017-9208 |
CWE-400 | Low | - | 14.05.2018 | - | ||
| #VU12627 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2017-18186 |
CWE-835 | Low | - | 14.05.2018 | - | ||
| #VU12626 - Memory corruption CVE-2017-18185 |
CWE-119 | Low | - | 14.05.2018 | - | ||
| #VU12625 - Memory corruption CVE-2017-18184 |
CWE-119 | Low | - | 14.05.2018 | - | ||
| #VU12624 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2017-18183 |
CWE-835 | Low | - | 14.05.2018 | - | ||
| #VU12623 - Resource exhaustion CVE-2017-12595 |
CWE-400 | Low | - | 14.05.2018 | - | ||
| #VU12622 - Resource exhaustion CVE-2017-11627 |
CWE-835 | Low | - | 14.05.2018 | - | ||
| #VU12621 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2017-11626 |
CWE-400 | Low | - | 14.05.2018 | - | ||
| #VU12620 - Resource exhaustion CVE-2017-11625 |
CWE-835 | Low | - | 14.05.2018 | - | ||
| #VU12619 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2017-11624 |
CWE-400 | Low | - | 14.05.2018 | - | ||
| #VU12618 - Resource exhaustion CVE-2015-9252 |
CWE-835 | Low | - | 14.05.2018 | - |