Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.5

cleanstart/qpdf can be tricked into crashing

published 4 days ago
Summary

The qpdf software library used to process PDF files can be made to crash by specially crafted documents. This could interrupt services that rely on PDF handling. Update the qpdf package to the latest version or apply the vendor's recommended patch to prevent the issue.

What to do
  • Update cleanstart qpdf to version 7.0.0-r0.
Affected software
Ecosystem VendorProductAffected versions
CleanStart cleanstart qpdf < 7.0.0-r0
Fix: upgrade to 7.0.0-r0
Original advisory text
libqpdf
Security vulnerability affects the qpdf package. libqpdf.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.5 Medium
Timeline
Published31 Oct 2026
Updated31 Oct 2026
First seen31 Oct 2026
Sources
CLEANSTART-2024-BV68275 · OSV
Track software like this
Free during beta