ZeroHour

CVE-2017-18184

CVSS 3.0
5.5 medium
EPSS
<1%p50
Published
()
Modified
Description

An issue was discovered in QPDF before 7.0.0. There is a stack-based out-of-bounds read in the function iterate_rc4 in QPDF_encryption.cc.

Vendors
qpdf project
Products
qpdf
Weakness
CWE-125
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

In the news

No ingested article mentions this CVE yet.