A flaw was found in PDFResurrect in version 0.22b. There is a infinite loop in getxreflinearskipped() in pdf.c via a crafted PDF file.

Reference: https://github.com/enferex/pdfresurrect/issues/17

Upstream patch: https://github.com/enferex/pdfresurrect/commit/7e35d1806e111fd28610ccc86bb33f54792ac370

In PDFResurrect 0.12 through 0.19, gettype in pdf.c has an out-of-bounds write via a crafted PDF document.

An issue was discovered in PDFResurrect before 0.18. pdfloadpageskids in pdf.c doesn't validate a certain size value, which leads to a malloc failure and out-of-bounds write.

PDFResurrect 0.15 has a buffer overflow via a crafted PDF file because data associated with startxref and %%EOF is mishandled.

PDFResurrect before 0.20 lack of header validation checks causes heap-buffer-overflow in pdfgetversion().