PdfPig 0.1.11 breaks image decoding with "Decoded stream size exceeds estimated maximum" error

[ilCosmico]

Issue Summary

After updating the following packages:

• PdfPig from 0.1.10 to 0.1.11
• PdfPig.Filters.Dct.JpegLibrary from 0.1.10.2 to 0.1.11

I'm getting a PdfDocumentFormatException when trying to read a specific PDF file.

Exception

UglyToad.PdfPig.Core.PdfDocumentFormatException: Decoded stream size exceeds the estimated maximum size.
Current decoded stream length: 2266737, 1 filters applied out of 2.

This happens during image extraction for an XObject image.
Rolling back to the previous versions resolves the issue.

Additional Notes

• The exception is thrown while processing an image with width 1379 px and height 236.64 px.
• The error seems to be related to the new version of PdfPig.Filters.Dct.JpegLibrary.

Attachments

• A screenshot showing the exact code and exception:

• The PDF file used to reproduce the issue
  testCase.pdf
• A minimal reproducible example in a ZIP file: this contains a small Visual Studio project that triggers the error directly
  PdfPigTest.7z.txt (Please rename the attached file from .txt back to .7z before extracting.)

Steps to Reproduce

1. Open and run the attached sample project
2. The exception is thrown during image extraction using TryGetPng() or GetImageBytes()

Expected Behavior

The image should be decoded without throwing an exception, as it was in version 0.1.10.

Please let me know if you need further details or if I can help further in some way.

[ilCosmico]

@BobLd I'm not sure whether this issue should remain open here or be moved to https://github.com/BobLd/UglyToad.PdfPig.Filters.Dct.JpegLibrary instead. Let me know what you think.

[BobLd]

thanks a lot for sharing the document @ilCosmico, it should be fixed in #1126.

This is part of a new mechanism to prevent malicious OOM when decompressing

[ilCosmico]

@BobLd I tested version 0.1.12-alpha-20250810-a43b9 and the issue appears to be resolved.
Do you have an ETA for the stable 0.1.12 release? (I’m asking because I cannot include a prerelease version)