{"id":"USN-6713-1","aliases":[],"status":"published","title":"qpdf vulnerability","description":"It was discovered that QPDF incorrectly handled certain memory operations\nwhen decoding JSON files. If a user or automated system were tricked into\nprocessing a specially crafted JSON file, QPDF could be made to crash,\nresulting in a denial of service, or possibly execute arbitrary code.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2024-03-25T12:01:37.414662Z","modified":"2026-02-04T04:34:22Z","fixes":[{"ecosystem":"Ubuntu:23.10","package":"qpdf","fixed_in":["11.5.0-1ubuntu1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Ubuntu:23.10","package":"qpdf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.5.0-1ubuntu1.1"}]}],"versions":["11.3.0-1","11.4.0-1","11.5.0-1","11.5.0-1ubuntu1"]}],"references":[{"url":"https://ubuntu.com/security/notices/USN-6713-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-24246","tags":["report"]}],"sources":{"osv":[{"id":"USN-6713-1","title":"qpdf vulnerability","description":"It was discovered that QPDF incorrectly handled certain memory operations\nwhen decoding JSON files. If a user or automated system were tricked into\nprocessing a specially crafted JSON file, QPDF could be made to crash,\nresulting in a denial of service, or possibly execute arbitrary code.\n","status":"published","published":"2024-03-25T12:01:37.414662Z","modified":"2026-02-04T04:34:22.665645Z","updated_at":"2026-11-02T16:58:17.914523Z"}]}}