CVE-2026-59941 | Dompdf up to 3.15 BMP decoder imagecreatetruecolor width/height allocation of resources

July 29, 2026 Yanac

A vulnerability labeled as problematic has been found in Dompdf up to 3.15. The affected element is the function imagecreatetruecolor of the component BMP decoder. Executing a manipulation of the argument width/height can lead to allocation of resources.

This vulnerability is handled as CVE-2026-59941. The attack can be executed remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More