CVE-2026-54071 BabelDOC: Arbitrary Code Execution via CMap Pickle Deserialization in babeldoc/pdfminer/cmapdb.py

BabelDOC is a document translation tool. Prior to 0.6.3, BabelDOC's vendored PDF parser in babeldoc/pdfminer/cmapdb.py deserializes untrusted pickle data when CMapDB.loaddata loads CMap files. PDF-controlled Encoding or CMapName values and embedded PostScript usecmap operators can reach this sink...

BreakPoint Software Hex Workshop Denial of Service vulnerability

Hex Workshop is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Hex Workshop CMAP文件处理堆溢出漏洞

BUGTRAQ ID: 33023 Hex Workshop是一款专业的十六进制编辑器。 如果用户使用Hex Workshop打开了包含有超长16进制序列的恶意颜色映射（CMAP）文件的话，就可能触发堆溢出，导致执行任意指令。 BreakPoint Software Hex Workshop 5.1.4 厂商补丁： BreakPoint Software ------------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.hexworkshop.com/...