[PDFBOX-5177] Optimize memory footprint of PDFObjectStreamParser

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.0.23, 3.0.0 PDFBox
• Fix Version/s: 2.0.24, 3.0.0 PDFBox
• Component/s: Parsing
• Labels: CVE-2021-31811
• Assignee: Andreas Lehmkühler
• Reporter: Andreas Lehmkühler
• Created: 25/Apr/21 10:27
• Updated: 28/Mar/23 06:38
• Resolved: 11/Jun/21 14:13

Description

PDFObjectStreamParser uses the number of objects /N from the dictionary to initialize the map for object numbers/offsets (3.0.0) or list of objects (2.0-branch), but sometimes the value is too big or the stream can't be read, This may lead to a memory issue if resources are limited.

Issue Links

• is related to: PDFBOX-5582 Avoid OOME when parsing an malformed pdf with a corrupted object stream