{"id":"OSV-2024-18","aliases":[],"status":"published","title":"Heap-use-after-free in QPDF::read_xref","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65777\n\n```\nCrash type: Heap-use-after-free READ 8\nCrash state:\nQPDF::read_xref\nQPDF::reconstruct_xref\nQPDF::parse\n```","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2024-01-19T00:01:09.084916Z","modified":"2025-01-10T05:03:37Z","affected":[{"source":"osv","ecosystem":"OSS-Fuzz","package":"qpdf","ranges":[{"type":"GIT","events":[{"introduced":"5641832e54e347c2c33e9304d96cca450eb305ed"},{"fixed":"ed43691bf3e1da1cefb7a4618cb809684040dd65"},{"fixed":"6b80e0f14b296c21d38a92e25af72da9bf5757ae"}]}],"versions":["v11.8.0"]}],"references":[{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65777","tags":["report"]}],"sources":{"osv":[{"id":"OSV-2024-18","title":"Heap-use-after-free in QPDF::read_xref","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65777\n\n```\nCrash type: Heap-use-after-free READ 8\nCrash state:\nQPDF::read_xref\nQPDF::reconstruct_xref\nQPDF::parse\n```\n","status":"published","published":"2024-01-19T00:01:09.084916Z","modified":"2025-01-10T05:03:37.159682Z","updated_at":"2026-11-02T15:52:49.981578Z"}]}}