CVE-2026-54081 Details
Description
veraPDF PDF parser is a PDF parser for veraPDF. Prior to 1.30.2 and 1.31.23, veraPDF-parser contains a denial-of-service vulnerability in veraPDF-parser/src/main/java/org/verapdf/pd/font/type1/Type1FontProgram.java and veraPDF-parser/src/main/java/org/verapdf/parser/postscript/PSOperator.java, where a crafted Type 1 font /FontDescriptor /FontFile program can execute unbounded PostScript array allocation, a zero-increment for loop, or self-recursive toExecute user dictionary lookups and exhaust validator memory, CPU, or stack. This issue is fixed in versions 1.30.2 and 1.31.23.
A denial-of-service vulnerability has been identified in veraPDF's PDF parser, specifically in versions prior to 1.30.2 and 1.31.23. The issue arises in the Type 1 font program parser, which is part of the PostScript interpretation process. When a PDF containing a malicious Type 1 font is processed, the parser can be manipulated to execute unbounded PostScript array allocations or create infinite loops, leading to excessive memory or CPU usage. This vulnerability is triggered by Type 1 fonts that include attacker-supplied PostScript in their /FontFile program, exploiting the parser's lack of proper validation on certain operations.
Users can upgrade to veraPDF versions 1.30.2 or 1.31.23 to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Jul 29, 2026CISA-ADP
Assessed Jul 30, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/veraPDF/veraPDF-parser/commit/73d6ec002b98ce1f3f68640442f8e5d5613c80ce | [email protected] | Source CodeVendor |
| https://github.com/veraPDF/veraPDF-parser/commit/cb3538607a549d63504299be1088c85ae48605f4 | [email protected] | Source CodeVendor |
| https://github.com/veraPDF/veraPDF-parser/pull/703 | [email protected] | Issue TrackingSource CodeVendor |
| https://github.com/veraPDF/veraPDF-parser/security/advisories/GHSA-7c26-995w-6f47 | [email protected] | AdvisoryRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-1325 | Improperly Controlled Sequential Memory Allocation | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| veraPDF | <= 1.30.1 (semver) >= 1.31.1, <= 1.31.22 (semver) |
CPE
Remediation
| |
| veraPDF-parser | All versions |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 30, 2026 | CVE Modified | CISA-ADP |
| Jul 29, 2026 | New CVE Received | [email protected] |