CVE-2024-22640

Published: 19 April 2024

TCPDF version <=6.6.5 is vulnerable to ReDoS (Regular Expression Denial of Service) if parsing an untrusted HTML page with a crafted color.

Status

References

• https://www.cve.org/CVERecord?id=CVE-2024-22640
• https://bugzilla.redhat.com/show_bug.cgi?id=2276090
• https://github.com/zunak/CVE-2024-22640
• https://github.com/tecnickcom/TCPDF
• NVD
• Launchpad
• Debian