Threats tagged 'ghsa-2w74-49x3-cmf5'

BabelDOC versions from 0.3.61 up to but not including 0.7.0 contain a resource exhaustion vulnerability. This flaw allows remote attackers to exhaust CPU and memory resources by submitting a crafted PDF with an embedded ToUnicode CMap that declares an excessively large range. The vulnerability causes billions of loop iterations in the translation worker, leading to a denial of service condition.