CVE-2023-28428

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-28428
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-28428.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-28428
Aliases
  • GHSA-68x8-9phf-j7jf
Downstream
Published
2023-03-20T14:51:43.619Z
Modified
2026-04-12T01:01:18.541458Z
Severity
  • 6.2 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
PDFio vulnerable to Denial Of Service when opening a corrupt PDF file
Details

PDFio is a C library for reading and writing PDF files. In versions 1.1.0 and prior, a denial of service vulnerability exists in the pdfio parser. Crafted pdf files can cause the program to run at 100% utilization and never terminate. This is different from CVE-2023-24808. A patch for this issue is available in version 1.1.1.

Database specific 
{
    "cwe_ids": [
        "CWE-770"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/28xxx/CVE-2023-28428.json",
    "cna_assigner": "GitHub_M"
}
References

Affected packages

Git / github.com/michaelrsweet/pdfio

Affected ranges

Type
GIT
Repo
https://github.com/michaelrsweet/pdfio
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
97d4955666779dc5b0665e15dd951a5c12426a31

Affected versions

v1.*
v1.0.0
v1.0.1
v1.0b1
v1.0b2
v1.1.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-28428.json"
vanir_signatures_modified 
"2026-04-12T01:01:18Z"
vanir_signatures 
[
    {
        "signature_version": "v1",
        "deprecated": false,
        "digest": {
            "length": 6073.0,
            "function_hash": "282862833901075072396704334720462650049"
        },
        "source": "https://github.com/michaelrsweet/pdfio/commit/97d4955666779dc5b0665e15dd951a5c12426a31",
        "id": "CVE-2023-28428-67eea139",
        "signature_type": "Function",
        "target": {
            "function": "stream_read",
            "file": "pdfio-stream.c"
        }
    },
    {
        "signature_version": "v1",
        "deprecated": false,
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "136757870134198878303031303224936215815",
                "74457661806650491408718977145773838505",
                "177613088240574407086318299411708928272",
                "118533856694705943147356096536429962188",
                "130517689653997760486941337692287495160",
                "326032990751604882852460365411820410122",
                "19731369917382815659000814221008185265",
                "174265833420737648529198030630519158088",
                "247520657888028291381029273230200729045",
                "189225788223661238506916084824301576561",
                "14838257183494309269511598245203038315",
                "22159743989449190557234030619469121826",
                "1877855205430806779910428461464290072",
                "255895707727051474936353233026286815516",
                "219508499250187393544363884578192782560",
                "174265833420737648529198030630519158088",
                "247520657888028291381029273230200729045",
                "45734730097148311820248376565881139406",
                "32241394353353000279595670550592631073",
                "242510861739666419454848867849567409445",
                "257673455368378403006710685455131430732",
                "1877855205430806779910428461464290072",
                "255895707727051474936353233026286815516",
                "219508499250187393544363884578192782560",
                "174265833420737648529198030630519158088",
                "247520657888028291381029273230200729045",
                "45734730097148311820248376565881139406",
                "32241394353353000279595670550592631073",
                "242510861739666419454848867849567409445",
                "257673455368378403006710685455131430732"
            ]
        },
        "source": "https://github.com/michaelrsweet/pdfio/commit/97d4955666779dc5b0665e15dd951a5c12426a31",
        "id": "CVE-2023-28428-dbb29497",
        "signature_type": "Line",
        "target": {
            "file": "pdfio-stream.c"
        }
    }
]