Lucene search
+L

7 matches found

NVD
NVD
added 2026/09/01 9:18 p.m.7 views

CVE-2026-84311

pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/page.py PageObject.extracttext and PageObject.extractxformtext to traverse a directed acyclic graph of reused form XObjects in which each form invokes a child multiple times,...

4.8CVSS0.00138EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/01 9:18 p.m.7 views

DEBIAN-CVE-2026-84311

pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/page.py PageObject.extracttext and PageObject.extractxformtext to traverse a directed acyclic graph of reused form XObjects in which each form invokes a child multiple times,...

4.8CVSS5.9AI score0.00138EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/01 8:03 p.m.20 views

CVE-2026-84311

pypdf , a pure-Python PDF library, is vulnerable to a denial-of-service condition in versions prior to 6.16.1 . A crafted PDF can trigger exponential traversal in PageObject._extract_text and PageObject.extract_xform_text (in pypdf/_page.py) by invoking a directed acyclic graph of reused form XOb...

4.8CVSS5.9AI score0.00138EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/09/01 8:03 p.m.8 views

EUVD-2026-69607

pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/page.py PageObject.extracttext and PageObject.extractxformtext to traverse a directed acyclic graph of reused form XObjects in which each form invokes a child multiple times,...

4.8CVSS5.9AI score0.00138EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2026/09/01 8:03 p.m.9 views

CVE-2026-84311

pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/page.py PageObject.extracttext and PageObject.extractxformtext to traverse a directed acyclic graph of reused form XObjects in which each form invokes a child multiple times,...

4.8CVSS5.9AI score0.00138EPSS
SaveExploits0
OSV
OSV
added 2026/09/01 8:03 p.m.10 views

CVE-2026-84311 pypdf: Possible long runtimes/large memory usage when extracting XForm objects

pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/page.py PageObject.extracttext and PageObject.extractxformtext to traverse a directed acyclic graph of reused form XObjects in which each form invokes a child multiple times,...

4.8CVSS5.9AI score
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/09/01 12:00 a.m.12 views

PT-2026-84463

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.16.1 Description An attacker can craft a PDF file that leads to excessive memory consumption and long runtimes. This occurs when extracting text from a page containing numerous reused form XObjects, where a form invok...

4.8CVSS5.8AI score0.00138EPSS
SaveExploits0References8
Rows per page
Query Builder