Lucene search
+L

4 matches found

PyPA
PyPA
•added 2026/07/13 3:46 p.m.•26 views

pypdf: Inefficient decoding of FlateDecode PNG predictor streams

ImpactAn attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires accessing a stream which uses the /FlateDecode filter with a PNG predictor. PatchesThis has been fixed in pypdf==6.12.2. WorkaroundsIf you cannot upgrade yet, consider applying the changes fr...

5.1CVSS5.6AI score0.00166EPSS
SaveExploits0References7Affected Software1
Tenable Nessus
Tenable Nessus
•added 2026/06/23 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2026-49460

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pypdf is a free and open-source pure-python PDF library. Prior to 6.12.2, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes...

5.1CVSS5.5AI score0.00166EPSS
SaveExploits0References3
OSV
OSV
•added 2026/06/22 8:28 p.m.•14 views

CVE-2026-49460 pypdf: Inefficient decoding of FlateDecode PNG predictor streams

pypdf is a free and open-source pure-python PDF library. Prior to 6.12.2, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires accessing a stream which uses the /FlateDecode filter with a PNG predictor. This vulnerability is fixed in 6.12.2...

5.1CVSS5.9AI score
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2026/06/16 1:46 p.m.•23 views

pypdf: Inefficient decoding of FlateDecode PNG predictor streams

Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires accessing a stream which uses the /FlateDecode filter with a PNG predictor. Patches This has been fixed in pypdf==6.12.2. Workarounds If you cannot upgrade yet, consider applying the changes...

5.1CVSS5.2AI score0.00166EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder