CVE-2023-28428: Pdfio Project Pdfio

Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days.

PDFio is a C library for reading and writing PDF files. In versions 1.1.0 and prior, a denial of service vulnerability exists in the pdfio parser. Crafted pdf files can cause the program to run at 100% utilization and never terminate. This is different from CVE-2023-24808. A patch for this issue is available in version 1.1.1.

Affected products

Published 2023-03-20. Last modified 2026-06-17.