It was discovered that QPDF incorrectly handled certain memory operations when decoding JSON files. If a user or automated system were tricked into processing a specially crafted JSON file, QPDF could be made to crash, resulting in a denial of service, or possibly execute arbitrary code.
{ "binaries": [ { "binary_name": "libqpdf-dev", "binary_version": "11.5.0-1ubuntu1.1" }, { "binary_name": "libqpdf29", "binary_version": "11.5.0-1ubuntu1.1" }, { "binary_name": "libqpdf29-dbgsym", "binary_version": "11.5.0-1ubuntu1.1" }, { "binary_name": "qpdf", "binary_version": "11.5.0-1ubuntu1.1" }, { "binary_name": "qpdf-dbgsym", "binary_version": "11.5.0-1ubuntu1.1" } ], "availability": "No subscription required" }