Lucene search
K

11130 matches found

OSV
OSV
added 2025/10/22 10:15 p.m.4 views

UBUNTU-CVE-2025-62707

pypdf is a free and open-source pure-python PDF library. Prior to version 6.1.3, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsing the content stream of a page which has an inline image using the DCTDecode filter. This has been fixed in...

8.7CVSS7AI score0.00402EPSS
Exploits0References6
CVE
CVE
added 2025/10/22 9:36 p.m.30 views

CVE-2025-62707

CVE-2025-62707 affects the pypdf Python PDF library. Before version 6.1.3, parsing the content stream of a page that contains an inline image using the DCTDecode filter can lead to an infinite loop. IBM and linked advisories note this vulnerability is fixed in pypdf 6.1.3; remediation includes up...

8.7CVSS6.5AI score0.00402EPSS
Exploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2025/10/22 9:36 p.m.3 views

CVE-2025-62707 pypdf affected by possible infinite loop when reading DCT inline images without EOF marker

pypdf is a free and open-source pure-python PDF library. Prior to version 6.1.3, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsing the content stream of a page which has an inline image using the DCTDecode filter. This has been fixed in...

8.7CVSS6.5AI score0.00402EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/10/22 9:36 p.m.36 views

CVE-2025-62707 pypdf affected by possible infinite loop when reading DCT inline images without EOF marker

pypdf is a free and open-source pure-python PDF library. Prior to version 6.1.3, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsing the content stream of a page which has an inline image using the DCTDecode filter. This has been fixed in...

8.7CVSS0.00402EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/22 9:36 p.m.27 views

EUVD-2025-35625

pypdf is a free and open-source pure-python PDF library. Prior to version 6.1.3, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsing the content stream of a page which has an inline image using the DCTDecode filter. This has been fixed in...

8.7CVSS6.3AI score0.00402EPSS
Exploits0References5
Debian CVE
Debian CVE
added 2025/10/22 9:36 p.m.4 views

CVE-2025-62707

pypdf is a free and open-source pure-python PDF library. Prior to version 6.1.3, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsing the content stream of a page which has an inline image using the DCTDecode filter. This has been fixed in...

8.7CVSS5.3AI score0.00402EPSS
Exploits0
OSV
OSV
added 2025/10/22 9:36 p.m.6 views

CVE-2025-62707 pypdf affected by possible infinite loop when reading DCT inline images without EOF marker

pypdf is a free and open-source pure-python PDF library. Prior to version 6.1.3, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsing the content stream of a page which has an inline image using the DCTDecode filter. This has been fixed in...

8.7CVSS6.9AI score0.00402EPSS
Exploits0References6
Snyk
Snyk
added 2025/10/22 7:40 p.m.1 views

Infinite loop

Overview pypdf is an A pure-python PDF library capable of splitting, merging, cropping, and transforming PDF files Affected versions of this package are vulnerable to Infinite loop in the parsing of content streams containing inline images with the DCTDecode filter when the end-of-file marker is...

8.7CVSS6.9AI score0.00402EPSS
Exploits0References2
OSV
OSV
added 2025/10/22 7:40 p.m.3 views

GHSA-VR63-X8VC-M265 pypdf possibly loops infinitely when reading DCT inline images without EOF marker

Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsing the content stream of a page which has an inline image using the DCTDecode filter. Patches This has been fixed in pypdf==6.1.3. Workarounds If you cannot upgrade yet, consider...

8.7CVSS6.8AI score0.00402EPSS
Exploits0References6
Github Security Blog
Github Security Blog
added 2025/10/22 7:40 p.m.9 views

pypdf possibly loops infinitely when reading DCT inline images without EOF marker

Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsing the content stream of a page which has an inline image using the DCTDecode filter. Patches This has been fixed in pypdf==6.1.3. Workarounds If you cannot upgrade yet, consider...

8.7CVSS6.8AI score0.00402EPSS
Exploits0References6Affected Software1
CNNVD
CNNVD
added 2025/10/22 12:0 a.m.4 views

pypdf 安全漏洞

pypdf is py-pdf open source a free open source pure python PDF library . The ability to split, merge, crop and convert pages of a PDF file. A security vulnerability exists in pypdf versions prior to 6.1.3, which stems from parsing a stream of inline image page content using the DCTDecode filter,...

8.7CVSS6.4AI score0.00402EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/10/22 12:0 a.m.1 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from an invalid timer ID search loop limit in the posixtimeradd function, which could lead to an infinite loop...

5.9AI score0.00193EPSS
Exploits0References9
Tenable Nessus
Tenable Nessus
added 2025/10/22 12:0 a.m.4 views

TencentOS Server 2: python3 (TSSA-2025:0803)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0803 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

7.5CVSS6.9AI score0.00586EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/10/22 12:0 a.m.5 views

PT-2025-43413

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.1.3 Description A crafted PDF file can cause an infinite loop when parsed, specifically when processing the content stream of a page containing an inline image utilizing the DCTDecode filter. This issue requires parsi...

8.7CVSS6.6AI score0.00402EPSS
Exploits0References15
Tenable Nessus
Tenable Nessus
added 2025/10/22 12:0 a.m.7 views

TencentOS Server 3: python3.12 (TSSA-2025:0795)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0795 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

7.5CVSS6.9AI score0.00586EPSS
Exploits0References2
OSV
OSV
added 2025/10/21 7:17 p.m.4 views

JLSEC-2025-185 libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a...

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Using well-crafted inputs to gitrevparsesingle can cause the function to enter an infinite loop, potentially causing a Denial ...

7.5CVSS6.8AI score0.01443EPSS
Exploits0References9
Tenable Nessus
Tenable Nessus
added 2025/10/18 12:0 a.m.3 views

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : gstreamer-plugins-rs (SUSE-SU-2025:03629-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:03629-1 advisory. Update to version 0.12.11 jscPED-13826: - CVE-2024-32650: Fixed infinite loop in...

7.5CVSS5.5AI score0.00949EPSS
Exploits0References4
OSV
OSV
added 2025/10/17 5:40 p.m.4 views

JLSEC-2025-68 xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-fi...

xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation...

7.5CVSS7AI score0.07836EPSS
Exploits0References15
OSV
OSV
added 2025/10/17 2:56 p.m.3 views

OESA-2025-2475 wireshark security update

Security Fixes: MONGO dissector infinite loop in Wireshark 4.4.0 to 4.4.9 and 4.2.0 to 4.2.13 allows denial of serviceCVE-2025-11626...

5.5CVSS6.9AI score0.0011EPSS
Exploits0References2
OSV
OSV
added 2025/10/17 2:56 p.m.3 views

OESA-2025-2474 wireshark security update

Security Fixes: MONGO dissector infinite loop in Wireshark 4.4.0 to 4.4.9 and 4.2.0 to 4.2.13 allows denial of serviceCVE-2025-11626...

5.5CVSS6.9AI score0.0011EPSS
Exploits0References2
Rows per page
Query Builder