USN-6713-1
qpdf vulnerability
It was discovered that QPDF incorrectly handled certain memory operations when decoding JSON files. If a user or automated system were tricked into processing a specially crafted JSON file, QPDF could be made to crash, resulting in a denial of service, or possibly execute arbitrary code.
What each source reports
OSV No score
qpdf vulnerability
It was discovered that QPDF incorrectly handled certain memory operations when decoding JSON files. If a user or automated system were tricked into processing a specially crafted JSON file, QPDF could be made to crash, resulting in a denial of service, or possibly execute arbitrary code.
- Record
USN-6713-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
qpdfUbuntu:23.10 |
before 11.5.0-1ubuntu1.1, plus listed versions 11.3.0-111.4.0-111.5.0-111.5.0-1ubuntu1 |
11.5.0-1ubuntu1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-6713-1 is a vulnerability with no CVSS score yet in qpdf, published March 25, 2024. No source lists public exploit code. Fixed in qpdf 11.5.0-1ubuntu1.1.