CVE-2026-118036: Progress Software Telerik Document Processing

Описание

Оригинално описание

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, infinite loop, inefficient algorithmic complexity and resource allocation vulnerabilities in RadPdfProcessing and AI document summarization and question answering allow an unauthenticated attacker to terminate or hang the host process via a crafted PDF document or document text submitted for summarization or question answering.

Засегнати продукти

• Progress Software Telerik Document Processing Libraries: преди 2026.3.1027

Вид слабост

• CWE-674 Uncontrolled Recursion
• CWE-835 Loop with Unreachable Exit Condition
• CWE-407 Неефективна алгоритмична сложност
• CWE-770 Allocation of Resources Without Limits or Throttling
• CWE-789 Memory Allocation with Excessive Size Value

История

Други уязвимости в Progress Software Telerik Document Processing Libraries

• 7.5CVE-2026-118037
• 7.5CVE-2026-118035
• 7.5CVE-2026-118040
• 7.5CVE-2026-118039
• 7.1CVE-2026-118038

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-118036
• https://nvd.nist.gov/vuln/detail/CVE-2026-118036
• https://docs.telerik.com/devtools/document-processing/knowledge-base/kb-security-uncontrolled-resource-consumption-pdfprocessing-cve-2026-118036