CoreCVE
Back

HIGH

TCPDF version 6.6.5 and before is vulnerable to ReDoS (Regular Expression Denial of Service) if parsing an untrusted SVG file

Published May 28, 2024

Description

TCPDF version 6.6.5 and before is vulnerable to ReDoS (Regular Expression Denial of Service) if parsing an untrusted SVG file.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-434

Unrestricted Upload of File

References (3)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published May 28, 2024
Updated Nov 3, 2025
Reserved Jan 11, 2024
Link CVE-2024-22641
CISA Vulnrichment
Updated Jul 29, 2024
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2024-22641
Red Hat
Severity n/a
Public date n/a
Links CVE-2024-22641
ENISA EUVD
Assigner mitre
Published May 28, 2024
Updated Nov 3, 2025
Exploited since n/a
Link EUVD-2024-20174
EUVD-2024-20174