It was discovered that QPDF incorrectly handled certain memory operations when decoding JSON files. If a user or automated system were tricked into processing a specially crafted JSON file, QPDF could be made to crash, resulting in a denial of service, or possibly execute arbitrary code.
{ "availability": "No subscription required", "binaries": [ { "binary_version": "11.5.0-1ubuntu1.1", "binary_name": "libqpdf-dev" }, { "binary_version": "11.5.0-1ubuntu1.1", "binary_name": "libqpdf29" }, { "binary_version": "11.5.0-1ubuntu1.1", "binary_name": "libqpdf29-dbgsym" }, { "binary_version": "11.5.0-1ubuntu1.1", "binary_name": "qpdf" }, { "binary_version": "11.5.0-1ubuntu1.1", "binary_name": "qpdf-dbgsym" } ] }