Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior are vulnerable to a Denial of Service (DoS) attack via resource exhaustion. An attacker can crash the PHP process by providing a specially crafted HTML document containing a single image with massive dimensions (e.g., 30,000x30,000 pixels). While Dompdf implements internal checks to validate image dimensions, these can be bypassed by using a high-entropy image (such as random noise) encoded in Base64 and wrapped in specific CSS containers. The vulnerability exists because the dimension validation happens early, but the resource allocation for calculating the object's bounding box and internal buffers during the rendering phase does not strictly limit the cumulative CPU time or memory usage for a single object that has passed the initial check. An unauthenticated remote attacker can cause a complete Denial of Service on the web server by submitting a crafted HTML string. This affects any application that allows users to provide HTML content or URLs that are subsequently converted to PDF using Dompdf. This issue has been fixed in version 3.16.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior are vulnerable to a Denial of Service     (DoS) attack via resource exhaustion. An attacker can crash the PHP process by providing a specially     crafted HTML document containing a single image with massive dimensions (e.g., 30,000x30,000 pixels).
    While Dompdf implements internal checks to validate image dimensions, these can be bypassed by using a     high-entropy image (such as random noise) encoded in Base64 and wrapped in specific CSS containers. The     vulnerability exists because the dimension validation happens early, but the resource allocation for     calculating the object's bounding box and internal buffers during the rendering phase does not strictly     limit the cumulative CPU time or memory usage for a single object that has passed the initial check. An     unauthenticated remote attacker can cause a complete Denial of Service on the web server by submitting a     crafted HTML string. This affects any application that allows users to provide HTML content or URLs that     are subsequently converted to PDF using Dompdf. This issue has been fixed in version 3.16.
    (CVE-2026-59942)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior are vulnerable to a Denial of Service
    (DoS) attack via resource exhaustion. An attacker can crash the PHP process by providing a specially
    crafted HTML document containing a single image with massive dimensions (e.g., 30,000x30,000 pixels).
    While Dompdf implements internal checks to validate image dimensions, these can be bypassed by using a
    high-entropy image (such as random noise) encoded in Base64 and wrapped in specific CSS containers. The
    vulnerability exists because the dimension validation happens early, but the resource allocation for
    calculating the object's bounding box and internal buffers during the rendering phase does not strictly
    limit the cumulative CPU time or memory usage for a single object that has passed the initial check. An
    unauthenticated remote attacker can cause a complete Denial of Service on the web server by submitting a
    crafted HTML string. This affects any application that allows users to provide HTML content or URLs that
    are subsequently converted to PDF using Dompdf. This issue has been fixed in version 3.16.
    (CVE-2026-59942)

ID	Name	Product	Family	Type	Severity
330628	Linux Distros Unpatched Vulnerability : CVE-2026-59942	Nessus	Misc.	Local	medium
445145	SCA: security update for dompdf/dompdf (GHSA-f5gf-2cj8-52g2)	Tenable Cloud Security	SCA Checks	Local	medium
445145	SCA: security update for dompdf/dompdf (GHSA-f5gf-2cj8-52g2)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium

Detections

Analytics

CVE-2026-59942

medium

Tenable Plugins

medium

medium

medium