CVE-2024-24246 – Ubuntu Security Notice USN-6713-1

https://notcve.org/view.php?id=CVE-2024-24246

29 Feb 2024 — Heap Buffer Overflow vulnerability in qpdf 11.9.0 allows attackers to crash the application via the std::__shared_count() function at /bits/shared_ptr_base.h. La vulnerabilidad de desbordamiento de búfer de almacenamiento dinámico en qpdf 11.9.0 permite a los atacantes bloquear la aplicación a través de la función std::__shared_count() en /bits/shared_ptr_base.h. It was discovered that QPDF incorrectly handled certain memory operations when decoding JSON files. If a user or automated system were tricked int... • https://github.com/qpdf/qpdf/issues/1123 • CWE-122: Heap-based Buffer Overflow CWE-787: Out-of-bounds Write •