js · muhammaraCritical
muhammara NULL pointer dereference in PDFParser::CreateFilterForStream()
A NULL pointer dereference in PDFParser::CreateFilterForStream() when processing a PDF stream with /Filter /LZWDecode and a /DecodeParms dictionary missing the
What changed
A NULL pointer dereference in PDFParser::CreateFilterForStream() when processing a PDF stream with /Filter /LZWDecode and a /DecodeParms dictionary missing the EarlyChange key causes a crash.
Who it affects
Any application accepting untrusted PDFs and using muhammara <= 6.0.4 to read stream contents.
What to do today
Update muhammara to a patched version or apply the fix: check if earlyObj is non-NULL before calling GetValue().
The trail
Collected→
Audited→
Written→
Published