Skip to content

v2.12.3

Choose a tag to compare

View all tags
@k00ni k00ni released this 08 Jan 08:19
· 1 commit to master since this release
v2.12.3
61c9bca
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Security fix and refinements

Fix for potential Denial of Service vulnerability

Summary: The fix prevents the RawDataParser.php‎ to enter an endless loop under certain circumstances which would lead to memory exhaustion.

Details: When parsing a specifically crafted, malformed PDF file, the low-level RawDataParser enters a state that leads to uncontrolled memory allocation. This continues until the PHP script exhausts its memory_limit and crashes with a fatal error. An attacker can leverage this vulnerability by submitting a small, malicious PDF file to any service using this library, causing the server process to crash and become unavailable.

Thank you Yang LUO (https://github.com/N0zoM1z0) for reporting this and the provided details on the matter. #787 contains further information.

Refinement to improve extracted texts

Ignore Form as well as Image XObjects when assembling the text array for a PDFObject. by @rupertj in #783

Full Changelog: v2.12.2...v2.12.3

Contributors

rupertj
Assets 2
Loading