THREATOPS

THREAT OPS › Threat News › [GHSA] GHSA-7c26-995w-6f47 (medium) — veraPDF Parser DoS via PostScript Type 1 Font Programs

[GHSA] GHSA-7c26-995w-6f47 (medium) — veraPDF Parser DoS via PostScript Type 1 Font Programs

medgithub_advisoriesPublished 2026-07-29

GHSA-7c26-995w-6f47 Severity: medium CVE: CVE-2026-54081

veraPDF Parser DoS via PostScript Type 1 Font Programs

## Summary

**Description**

A PostScript-interpreter-driven Denial of Service (CWE-1325) vulnerability in veraPDF allows a remote attacker to exhaust validator memory or CPU by submitting a PDF whose Type 1 font `/FontFile` is a font program containing attacker-supplied PostScript. ve

Indicators of compromise

CVE-2026-54081cve

Original source: https://github.com/advisories/GHSA-7c26-995w-6f47