Junglewise Threat Intelligence

CVE-2026-25535: parallax jsPDF denial of service in addImage method

CVE-2026-25535 · Severity: high · CVSS 7.5 · Published 2026-02-19

Technologies: Red Hat Advanced Cluster Security for Kubernetes, jspdf (npm). Vendors: Red Hat, Parallax, npm.

Executive brief

jsPDF is a popular JavaScript library used to generate PDF documents in web browsers and server-side environments like Node.js. A vulnerability in how it handles images allows an attacker to provide a specially crafted GIF file that causes the application to crash or freeze by consuming all available memory. This can lead to service outages for web applications that allow users to upload or display images within generated PDFs.

Technical details

A Denial of Service (DoS) vulnerability exists in jsPDF's GIF processing logic within the `gif_support.js` and `omggif.js` modules. The library fails to validate image dimensions (width and height) specified in the GIF Logical Screen Descriptor header before allocating memory for the pixel buffer. An attacker can supply a malicious GIF with extreme dimensions (e.g., 65535x65535), leading to an 'out of memory' (OOM) error or a process crash. This affects the `addImage` and `html` methods. The issue is fixed in version 4.2.0 by implementing a check to ensure image dimensions do not exceed a 512MB threshold.

Affected products

  • parallax jsPDF < 4.2.0
  • Red Hat Red Hat Advanced Cluster Security for Kubernetes 4.8
  • Red Hat Red Hat Advanced Cluster Security for Kubernetes 4.9

Timeline

  • 2026-02-19: disclosed
  • 2026-02-19: patched: Fixed in version 4.2.0
  • 2026-02-19: advisory

References

Related threats