Lucene search
K

7 matches found

SUSE CVE
SUSE CVE
added 6 days ago8 views

SUSE CVE-2026-48735

pypdf is a free and open-source pure-python PDF library. Prior to 6.12.1, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing large XMP metadata, possibly with lots of unnecessary elements. This vulnerability is fixed in 6.12.1...

6.9CVSS5.8AI score0.00012EPSS
Exploits0References3
OSV
OSV
added 2026/05/28 4:16 p.m.5 views

DEBIAN-CVE-2026-48735

pypdf is a free and open-source pure-python PDF library. Prior to 6.12.1, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing large XMP metadata, possibly with lots of unnecessary elements. This vulnerability is fixed in 6.12.1...

5.5CVSS5.8AI score0.00012EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/05/28 2:49 p.m.4 views

CVE-2026-48735 pypdf: Manipulated XMP metadata streams can exhaust RAM

pypdf is a free and open-source pure-python PDF library. Prior to 6.12.1, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing large XMP metadata, possibly with lots of unnecessary elements. This vulnerability is fixed in 6.12.1...

6.9CVSS5.8AI score0.00012EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2026/05/28 2:49 p.m.6 views

CVE-2026-48735

pypdf is a free and open-source pure-python PDF library. Prior to 6.12.1, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing large XMP metadata, possibly with lots of unnecessary elements. This vulnerability is fixed in 6.12.1...

6.9CVSS5.8AI score0.00012EPSS
Exploits0
CVE
CVE
added 2026/05/28 2:49 p.m.13 views

CVE-2026-48735

The CVE affects the Python PDF library pypdf prior to version 6.12.1, where parsing large XMP metadata can cause excessive memory usage. Root cause is processing crafted or verbose XMP metadata that expands memory footprint. Impact stated: high impact on availability due to memory exhaustion; con...

6.9CVSS5.8AI score0.00012EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2024/09/30 7:7 a.m.23 views

RHSA-2023:0261 Red Hat Security Advisory: Satellite 6.12.1 Async Security Update

Bulletin has no description...

8.5CVSS8.6AI score0.94251EPSS
Exploits44References31
Tenable Nessus
Tenable Nessus
added 2024/04/28 12:0 a.m.32 views

RHEL 8 : Satellite 6.12.1 Async Security Update (Critical) (RHSA-2023:0261)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0261 advisory. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to...

9.8CVSS7.8AI score0.94251EPSS
Exploits44References20
Rows per page
Query Builder