TCPDF version <=6.6.5 is vulnerable to ReDoS (Regular Expression Denial of Service) if parsing an untrusted HTML page with a crafted color.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://github.com/tecnickcom/TCPDF | Product |
| https://github.com/tecnickcom/TCPDF | Product |
| https://github.com/zunak/CVE-2024-22640 | Exploit Third Party Advisory |
| https://github.com/zunak/CVE-2024-22640 | Exploit Third Party Advisory |
| https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LIB3R2WB7XPW2I4PGVMZ3VLFLRHOK4RB/ | Third Party Advisory |
| https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LIB3R2WB7XPW2I4PGVMZ3VLFLRHOK4RB/ | Third Party Advisory |
Configurations
History
21 May 2025, 18:09
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:* cpe:2.3:a:tcpdf_project:tcpdf:*:*:*:*:*:*:*:* |
|
| First Time |
Tcpdf Project
Fedoraproject Tcpdf Project tcpdf Fedoraproject fedora |
|
| References | () https://github.com/zunak/CVE-2024-22640 - Exploit, Third Party Advisory | |
| References | () https://github.com/tecnickcom/TCPDF - Product | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LIB3R2WB7XPW2I4PGVMZ3VLFLRHOK4RB/ - Third Party Advisory |
02 May 2024, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
19 Apr 2024, 16:19
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-04-19 16:15
Updated : 2025-05-21 18:09
NVD link : CVE-2024-22640
Mitre link : CVE-2024-22640
JSON object : View
Products Affected
tcpdf_project
- tcpdf
fedoraproject
- fedora
CWE
No CWE.