{"id":"CVE-2018-9918","details":"libqpdf.a in QPDF through 8.0.2 mishandles certain \"expected dictionary key but found non-name object\" cases, allowing remote attackers to cause a denial of service (stack exhaustion), related to the QPDFObjectHandle and QPDF_Dictionary classes, because nesting in direct objects is not restricted.","modified":"2026-07-08T12:28:52.568444Z","published":"2018-04-10T18:29:00.450Z","related":["SUSE-SU-2024:2173-1"],"database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"14.04"},{"last_affected":"14.04"},{"introduced":"16.04"},{"last_affected":"16.04"},{"introduced":"17.10"},{"last_affected":"17.10"}],"source":"CPE_STRING","vendor_product":"canonical:ubuntu_linux"}]},"references":[{"type":"ADVISORY","url":"https://usn.ubuntu.com/3638-1/"},{"type":"FIX","url":"https://github.com/qpdf/qpdf/commit/b4d6cf6836ce025ba1811b7bbec52680c7204223"},{"type":"FIX","url":"https://github.com/qpdf/qpdf/issues/202"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/qpdf/qpdf","events":[{"introduced":"0"},{"last_affected":"f8c8e4dcc0f45779dcb93de6f417a2c189d5c157"},{"fixed":"b4d6cf6836ce025ba1811b7bbec52680c7204223"}],"database_specific":{"cpe":"cpe:2.3:a:qpdf_project:qpdf:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"8.0.2"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["release-qpdf-8.0.2","release-qpdf-8.0.1","release-qpdf-8.0.0","release-qpdf-8.0.rc3","release-qpdf-8.0.rc2","release-qpdf-8.0.rc1","release-qpdf-8.0.a1","release-qpdf-7.1.1","release-qpdf-7.1.0","release-qpdf-7.0.0","release-qpdf-7.0.b1","release-qpdf-6.0.0","release-qpdf-5.2.0","release-qpdf-5.1.3","release-qpdf-5.1.2","release-qpdf-5.1.1","release-qpdf-5.1.0","release-qpdf-5.0.1","release-qpdf-5.0.0","release-qpdf-4.2.0","release-qpdf-4.1.0","release-qpdf-4.0.1","release-qpdf-4.0.0","release-qpdf-3.0.2","release-qpdf-3.0.1","release-qpdf-3.0.0","release-qpdf-3.0.rc1","release-qpdf-2.3.1","release-qpdf-2.3.0","release-qpdf-2.2.4","release-qpdf-2.2.3","release-qpdf-2.2.2","release-qpdf-2.2.1","release-qpdf-2.2.0","release-qpdf-2.2.rc1","release-qpdf-2.1.5","release-qpdf-2.1.4","release-qpdf-2.1.3","release-qpdf-2.1.2","release-qpdf-2.1.1","release-qpdf-2.1","release-qpdf-2.1.rc1","release-qpdf-2.0.6","release-qpdf-2.0.5","release-qpdf-2.0.4","release-qpdf-2.0.3","release-qpdf-2.0.2","release-qpdf-2.0.1","release-qpdf-2.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-9918.json","vanir_signatures_modified":"2026-07-08T12:28:52Z","vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["181739345319500568680739432924015967377","106959424485635183592864499561300455322","33834260254958747297438551673392020084","172637144567233369777621291369876028934","16267163913427358820904854266060915297","75590030690278665368514097307259967412","111827253706210392211691782529734872093","207665020818809464945553329770339154989","304524329726436421318641378340825999579"],"threshold":0.9},"id":"CVE-2018-9918-249879d0","signature_type":"Line","signature_version":"v1","source":"https://github.com/qpdf/qpdf/commit/b4d6cf6836ce025ba1811b7bbec52680c7204223","target":{"file":"libqpdf/QPDFObjectHandle.cc"}},{"signature_version":"v1","source":"https://github.com/qpdf/qpdf/commit/b4d6cf6836ce025ba1811b7bbec52680c7204223","target":{"file":"libqpdf/QPDFObjectHandle.cc","function":"QPDFObjectHandle::parseInternal"},"deprecated":false,"digest":{"function_hash":"338132264288561279274696630611627217117","length":7243},"id":"CVE-2018-9918-9be83622","signature_type":"Function"}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}]}