Lucene search
+L

40 matches found

Tenable Nessus
Tenable Nessus
•added 2026/10/23 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2026-113786

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pypdf is a free and open-source pure-python PDF library. Prior to 6.21.1, an attacker can craft a PDF containing image data labeled with the /DCTDecode filter...

2.3CVSS6.1AI score0.00375EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/10/22 4:28 p.m.•12 views

SUSE CVE-2026-113786

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.1, an attacker can craft a PDF containing image data labeled with the /DCTDecode filter that causes Pillow to select and invoke an unintended image parser when the image is loaded. Environments without the optional Pillow...

2.3CVSS6AI score0.00375EPSS
SaveExploits0References3
osv_ghsa
osv_ghsa
•added 2026/10/21 7:58 p.m.•11 views

GHSA-5HX5-VPF9-5WCV pypdf: Unvalidated JPEG image data loading

Impact An attacker who uses this vulnerability can craft a PDF which leads to arbitrary image parsers being called. This requires loading an image which claims to use the /DCTDecode filter JPEG data. Users which do not have the optional Pillow dependency installed in their environment are not...

2.3CVSS6.1AI score0.00375EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2026/10/21 7:58 p.m.•19 views

pypdf: Unvalidated JPEG image data loading

Impact An attacker who uses this vulnerability can craft a PDF which leads to arbitrary image parsers being called. This requires loading an image which claims to use the /DCTDecode filter JPEG data. Users which do not have the optional Pillow dependency installed in their environment are not...

2.3CVSS6.1AI score0.00375EPSS
SaveExploits0References6Affected Software1
osv_debian
osv_debian
•added 2026/10/21 3:17 p.m.•15 views

DEBIAN-CVE-2026-113786

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.1, an attacker can craft a PDF containing image data labeled with the /DCTDecode filter that causes Pillow to select and invoke an unintended image parser when the image is loaded. Environments without the optional Pillow...

2.3CVSS6AI score0.00375EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/21 3:17 p.m.•8 views

CVE-2026-113786

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.1, an attacker can craft a PDF containing image data labeled with the /DCTDecode filter that causes Pillow to select and invoke an unintended image parser when the image is loaded. Environments without the optional Pillow...

2.3CVSS0.00375EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2026/10/21 2:38 p.m.•10 views

CVE-2026-113786

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.1, an attacker can craft a PDF containing image data labeled with the /DCTDecode filter that causes Pillow to select and invoke an unintended image parser when the image is loaded. Environments without the optional Pillow...

2.3CVSS6AI score0.00375EPSS
SaveExploits0
CVE
CVE
•added 2026/10/21 2:38 p.m.•28 views

CVE-2026-113786

The pypdf pure-python PDF library (prior to version 6.21.1 ) is vulnerable to unvalidated JPEG image data loading . An attacker can craft a PDF containing image data with the /DCTDecode filter, forcing the Pillow dependency to invoke an unintended image parser during loading. This vulnerability d...

2.3CVSS6AI score0.00375EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/10/21 2:38 p.m.•11 views

EUVD-2026-107286

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.1, an attacker can craft a PDF containing image data labeled with the /DCTDecode filter that causes Pillow to select and invoke an unintended image parser when the image is loaded. Environments without the optional Pillow...

2.3CVSS6.1AI score0.00375EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2026/10/21 2:38 p.m.•18 views

CVE-2026-113786 pypdf: Unvalidated JPEG image data loading

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.1, an attacker can craft a PDF containing image data labeled with the /DCTDecode filter that causes Pillow to select and invoke an unintended image parser when the image is loaded. Environments without the optional Pillow...

2.3CVSS6AI score
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/21 2:38 p.m.•25 views

CVE-2026-113786 pypdf: Unvalidated JPEG image data loading

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.1, an attacker can craft a PDF containing image data labeled with the /DCTDecode filter that causes Pillow to select and invoke an unintended image parser when the image is loaded. Environments without the optional Pillow...

2.3CVSS0.00375EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/10/21 12:00 a.m.•9 views

PT-2026-120633

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.21.1 Description An attacker can craft a PDF containing image data labeled with the /DCTDecode filter JPEG data that causes Pillow to select and invoke an unintended image parser when the image is loaded. This issue...

2.3CVSS5.9AI score0.00375EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
•added 2025/10/28 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2025-62707

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pypdf is a free and open-source pure-python PDF library. Prior to version 6.1.3, an attacker who uses this vulnerability can craft a PDF which leads to an...

8.7CVSS7AI score0.00444EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2025/10/23 11:22 p.m.•17 views

SUSE CVE-2025-62707

pypdf is a free and open-source pure-python PDF library. Prior to version 6.1.3, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsing the content stream of a page which has an inline image using the DCTDecode filter. This has been fixed in...

5.3CVSS7AI score0.00444EPSS
SaveExploits0References3
NVD
NVD
•added 2025/10/22 10:15 p.m.•56 views

CVE-2025-62707

pypdf is a free and open-source pure-python PDF library. Prior to version 6.1.3, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsing the content stream of a page which has an inline image using the DCTDecode filter. This has been fixed in...

8.7CVSS0.00444EPSS
SaveExploits0References4
osv_ubuntu
osv_ubuntu
•added 2025/10/22 10:15 p.m.•21 views

UBUNTU-CVE-2025-62707

pypdf is a free and open-source pure-python PDF library. Prior to version 6.1.3, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsing the content stream of a page which has an inline image using the DCTDecode filter. This has been fixed in...

8.7CVSS7AI score0.00444EPSS
SaveExploits0References6
Mend
Mend
•added 2025/10/22 9:36 p.m.•19 views

CVE-2025-62707

pypdf is a free and open-source pure-python PDF library. Prior to version 6.1.3, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsing the content stream of a page which has an inline image using the DCTDecode filter. This has been fixed in...

8.7CVSS7AI score0.00444EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/22 12:00 a.m.•7 views

CVE-2025-62707: Excessive Iteration

pypdf is a free and open-source pure-python PDF library. Prior to version 6.1.3, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsing the content stream of a page which has an inline image using the DCTDecode filter. This has been fixed in...

8.7CVSS7AI score0.00444EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/10/22 12:00 a.m.•23 views

PT-2025-43413

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.1.3 Description A crafted PDF file can cause an infinite loop when parsed, specifically when processing the content stream of a page containing an inline image utilizing the DCTDecode filter. This issue requires parsi...

8.7CVSS7.2AI score0.00444EPSS
SaveExploits0References32
CNNVD
CNNVD
•added 2025/10/22 12:00 a.m.•28 views

pypdf security vulnerability

pypdf is py-pdf open source a free open source pure python PDF library . The ability to split, merge, crop and convert pages of a PDF file. A security vulnerability exists in pypdf versions prior to 6.1.3, which stems from parsing a stream of inline image page content using the DCTDecode filter,...

8.7CVSS7.2AI score0.00444EPSS
SaveExploits0References4
Rows per page
Query Builder