Vendor
BabelDOC versions 0.3.61 through 0.6.x are vulnerable to remote denial-of-service via crafted PDF documents containing malicious ToUnicode CMap spans that cause excessive CPU and memory consumption.