CVE-2018-11128: Pdfparser

High severity, CVSS 7.8. EPSS: 1.7% chance of exploitation in the next 30 days.

The ObjReader::ReadObj() function in ObjReader.cpp in vincent0629 PDFParser allows remote attackers to cause a denial of service (stack-based buffer overflow) or possibly execute arbitrary code via a crafted pdf file.

Affected products

• Pdfparser Pdfparser: up to and including 0.12.0

Published 2018-05-17. Last modified 2026-06-17.