{"id":"OSV-2024-18","summary":"Heap-use-after-free in QPDF::read_xref","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65777\n\n```\nCrash type: Heap-use-after-free READ 8\nCrash state:\nQPDF::read_xref\nQPDF::reconstruct_xref\nQPDF::parse\n```\n","modified":"2025-01-10T05:03:37.159682Z","published":"2024-01-19T00:01:09.084916Z","references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65777"}],"affected":[{"package":{"name":"qpdf","ecosystem":"OSS-Fuzz","purl":"pkg:generic/qpdf"},"ranges":[{"type":"GIT","repo":"https://github.com/qpdf/qpdf.git","events":[{"introduced":"5641832e54e347c2c33e9304d96cca450eb305ed"},{"fixed":"ed43691bf3e1da1cefb7a4618cb809684040dd65"},{"fixed":"6b80e0f14b296c21d38a92e25af72da9bf5757ae"}]}],"versions":["v11.8.0"],"ecosystem_specific":{"severity":"HIGH"},"database_specific":{"fixed_range":"0109e365decfdc2e8fbb920b4179d32daeeb96ae:6b80e0f14b296c21d38a92e25af72da9bf5757ae","source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/qpdf/OSV-2024-18.yaml"}}],"schema_version":"1.7.3"}