Michaelrsweet pdfio up to 1.3.0 TTF Parser ttf.h read_camp nGroups infinite loop

Summaryinfo

A vulnerability was found in Michaelrsweet pdfio up to 1.3.0. It has been declared as problematic. This affects the function read_camp in the library ttf.h of the component TTF Parser. Such manipulation of the argument nGroups leads to infinite loop. This vulnerability is documented as CVE-2024-42358. The attack needs to be performed locally. There is not any exploit available. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability was found in Michaelrsweet pdfio up to 1.3.0 and classified as problematic. Affected by this issue is the function read_camp in the library ttf.h of the component TTF Parser. The manipulation of the argument nGroups with an unknown input leads to a infinite loop vulnerability. Using CWE to declare the problem leads to CWE-835. The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop. Impacted is availability. CVE summarizes:

PDFio is a simple C library for reading and writing PDF files. There is a denial of service (DOS) vulnerability in the TTF parser. Maliciously crafted TTF files can cause the program to utilize 100% of the Memory and enter an infinite loop. This can also lead to a heap-buffer-overflow vulnerability. An infinite loop occurs in the read_camp function by nGroups value. The ttf.h library is vulnerable. A value called nGroups is extracted from the file, and by changing that value, you can cause the program to utilize 100% of the Memory and enter an infinite loop. If the value of nGroups in the file is small, an infinite loop will not occur. This library, whether used as a standalone binary or as part of another application, is vulnerable to DOS attacks when parsing certain types of files. Automated systems, including web servers that use this code to convert PDF submissions into plaintext, can be DOSed if an attacker uploads a malicious TTF file. This issue has been addressed in release version 1.3.1. All users are advised to upgrade. There are no known workarounds for this vulnerability.

The advisory is shared for download at github.com. This vulnerability is handled as CVE-2024-42358 since 07/30/2024. The exploitation is known to be easy. The attack needs to be approached locally. There are known technical details, but no exploit is available.

Upgrading to version 1.3.1 eliminates this vulnerability. Applying the patch e4e1c39578279386b0ab9f9ac14b20a8bad4f935 is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Vendor

• Michaelrsweet

Name

• pdfio

Version

• 1.0
• 1.1
• 1.2
• 1.3.0

License

• open-source

Website

• Product: https://github.com/michaelrsweet/pdfio/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion