CVE-2024-56522

Description

An issue was discovered in TCPDF before 6.8.0. unserializeTCPDFtag uses != (aka loose comparison) and does not use a constant-time function to compare TCPDF tag hashes.

Reserved 2024-12-27 | Published 2024-12-27 | Updated 2024-12-30 | Assigner mitre

Product status

Default status
unaffected

Any version before 6.8.0
affected

References

tcpdf.org

github.com/tecnickcom/TCPDF/compare/6.7.8...6.8.0

github.com/...ommit/d54b97cec33f4f1a5ad81119a82085cad93cec89

www.php.net/manual/en/types.comparisons.php

cve.org (CVE-2024-56522)

nvd.nist.gov (CVE-2024-56522)

Download JSON