Xpdf 4.04 will deadlock on a PDF object stream whose "Length" field is itself in another object stream.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-3436.json"
[ { "events": [ { "introduced": "0" }, { "last_affected": "4.04" } ] } ]