In QPDF 8.2.1 in libqpdf/QPDFWriter.cc QPDFWriter::unparseObject and QPDFWriter::unparseChild have recursive calls for a long time which allows remote attackers to cause a denial of service via a crafted PDF file.