SetaPDF v2.52.0.2328 released2026-08-13
Our summer vacation is over, and we still have sand between our toes - but we're already releasing new versions of all SetaPDF components today!
This release comes with several fixes regarding handling of malformed PDFs which could cause recursion issues or an out-of-memory error. If you process foreign PDFs you should update as soon as possible!
We also added support for WebP images and tweaked or optimized several small issues.
Check the release notes of the components below.
Log in to download the latest version of the related packages!
Version 2.52.0.2328
Release date: 2026-08-13
SetaPDF-Core Component
Feature
- Added support for handling of structure destinations in
Destinationclass. - Added support for WebP images (The PDF format doesn't support WebP natively but the images are converted internally by GD functionalities to either PNG or JPEG).
Bugfix
- Fixed password preparation (SASLprep) if it includes the pipe (Ux007C) character for AES265 security handler.
- Fixed handling of null values in destination arrays.
- Fixed handling of recursion when resolving inherited attributes in faulty page tree.
- Fixed handling of
/Prevvalue in view to recursion when parsing cross-references. - Clone named
Cmapinstances to decouple assigned CID maps. - Fixed unbounded allocation in
Predictorclass which could cause an out-of-memory error.
Tweak
- Optimized cache key creation in
Font::getCharByCharCode(). - Harden data types by using
ensureType()calls and explicit data type and sanity checks inCrossReferenceTableclass. - Introduced
setasign\SetaPDF2\Core\Parser\CrossReferenceTable\FatalExceptionclass which is thrown if it is not possible to use a fallback strategy to parse a cross-reference. - Added plausibility checks for object counts in object streams.
- Added various checks for a valid key-length in
SecHandler\SecHandlerandSecHandler\AbstractHandlerclass.
