Lucene search
+L

12099 matches found

OSV
OSV
added 2025/10/22 9:36 p.m.10 views

CVE-2025-62707 pypdf affected by possible infinite loop when reading DCT inline images without EOF marker

pypdf is a free and open-source pure-python PDF library. Prior to version 6.1.3, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsing the content stream of a page which has an inline image using the DCTDecode filter. This has been fixed in...

8.7CVSS6.9AI score
SaveExploits0References6
Debian CVE
Debian CVE
added 2025/10/22 9:36 p.m.101 views

CVE-2025-62707

pypdf is a free and open-source pure-python PDF library. Prior to version 6.1.3, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsing the content stream of a page which has an inline image using the DCTDecode filter. This has been fixed in...

8.7CVSS5.3AI score0.00414EPSS
SaveExploits0
Github Security Blog
Github Security Blog
added 2025/10/22 7:40 p.m.19 views

pypdf possibly loops infinitely when reading DCT inline images without EOF marker

Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsing the content stream of a page which has an inline image using the DCTDecode filter. Patches This has been fixed in pypdf==6.1.3. Workarounds If you cannot upgrade yet, consider...

8.7CVSS6.8AI score0.00414EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2025/10/22 7:40 p.m.11 views

GHSA-VR63-X8VC-M265 pypdf possibly loops infinitely when reading DCT inline images without EOF marker

Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsing the content stream of a page which has an inline image using the DCTDecode filter. Patches This has been fixed in pypdf==6.1.3. Workarounds If you cannot upgrade yet, consider...

8.7CVSS6.8AI score0.00414EPSS
SaveExploits0References6
Snyk
Snyk
added 2025/10/22 7:40 p.m.12 views

Infinite loop

Overview pypdf is an A pure-python PDF library capable of splitting, merging, cropping, and transforming PDF files Affected versions of this package are vulnerable to Infinite loop in the parsing of content streams containing inline images with the DCTDecode filter when the end-of-file marker is...

8.7CVSS6.9AI score0.00414EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/10/22 12:00 a.m.15 views

pypdf 安全漏洞

pypdf is py-pdf open source a free open source pure python PDF library . The ability to split, merge, crop and convert pages of a PDF file. A security vulnerability exists in pypdf versions prior to 6.1.3, which stems from parsing a stream of inline image page content using the DCTDecode filter,...

8.7CVSS6.4AI score0.00414EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/10/22 12:00 a.m.14 views

PT-2025-43413

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.1.3 Description A crafted PDF file can cause an infinite loop when parsed, specifically when processing the content stream of a page containing an inline image utilizing the DCTDecode filter. This issue requires parsi...

8.7CVSS7.1AI score0.00414EPSS
SaveExploits0References32
Tenable Nessus
Tenable Nessus
added 2025/10/22 12:00 a.m.12 views

TencentOS Server 3: python3.12 (TSSA-2025:0795)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0795 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

7.5CVSS6.9AI score0.00611EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/10/22 12:00 a.m.6 views

TencentOS Server 2: python3 (TSSA-2025:0803)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0803 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

7.5CVSS6.9AI score0.00611EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/10/22 12:00 a.m.6 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from an invalid timer ID search loop limit in the posixtimeradd function, which could lead to an infinite loop...

5.9AI score0.00195EPSS
SaveExploits0References9
OSV
OSV
added 2025/10/21 7:17 p.m.8 views

JLSEC-2025-185 libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a...

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Using well-crafted inputs to gitrevparsesingle can cause the function to enter an infinite loop, potentially causing a Denial ...

7.5CVSS6.8AI score0.01443EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2025/10/18 12:00 a.m.8 views

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : gstreamer-plugins-rs (SUSE-SU-2025:03629-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:03629-1 advisory. Update to version 0.12.11 jscPED-13826: - CVE-2024-32650: Fixed infinite loop in...

7.5CVSS5.5AI score0.00949EPSS
SaveExploits0References4
OSV
OSV
added 2025/10/17 5:40 p.m.12 views

JLSEC-2025-68 xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain...

xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation...

7.5CVSS6.8AI score0.07836EPSS
SaveExploits0References15
SUSE Linux
SUSE Linux
added 2025/10/17 11:38 a.m.6 views

Security update for gstreamer-plugins-rs

This update for gstreamer-plugins-rs fixes the following issues: Update to version 0.12.11 jscPED-13826: CVE-2024-32650: Fixed infinite loop in rustls::conn::ConnectionCommon:completeio with proper client input bsc1223219. Patch Instructions: To install this SUSE update use the SUSE recommended...

7.5CVSS7AI score0.00949EPSS
SaveExploits0References6
OSV
OSV
added 2025/10/17 11:38 a.m.4 views

SUSE-SU-2025:03629-1 Security update for gstreamer-plugins-rs

This update for gstreamer-plugins-rs fixes the following issues: Update to version 0.12.11 jscPED-13826: - CVE-2024-32650: Fixed infinite loop in rustls::conn::ConnectionCommon:completeio with proper client input bsc1223219...

7.5CVSS7.4AI score0.00949EPSS
SaveExploits0References3
OSV
OSV
added 2025/10/17 11:09 a.m.9 views

OESA-2025-2474 wireshark security update

Security Fixes: MONGO dissector infinite loop in Wireshark 4.4.0 to 4.4.9 and 4.2.0 to 4.2.13 allows denial of serviceCVE-2025-11626...

5.5CVSS6.9AI score0.00112EPSS
SaveExploits0References2
OSV
OSV
added 2025/10/17 11:09 a.m.8 views

OESA-2025-2472 wireshark security update

Security Fixes: MONGO dissector infinite loop in Wireshark 4.4.0 to 4.4.9 and 4.2.0 to 4.2.13 allows denial of serviceCVE-2025-11626...

5.5CVSS6.9AI score0.00112EPSS
SaveExploits0References2
OSV
OSV
added 2025/10/17 11:09 a.m.8 views

OESA-2025-2475 wireshark security update

Security Fixes: MONGO dissector infinite loop in Wireshark 4.4.0 to 4.4.9 and 4.2.0 to 4.2.13 allows denial of serviceCVE-2025-11626...

5.5CVSS6.9AI score0.00112EPSS
SaveExploits0References2
OSV
OSV
added 2025/10/17 11:09 a.m.10 views

OESA-2025-2473 wireshark security update

Security Fixes: MONGO dissector infinite loop in Wireshark 4.4.0 to 4.4.9 and 4.2.0 to 4.2.13 allows denial of serviceCVE-2025-11626...

5.5CVSS6.9AI score0.00112EPSS
SaveExploits0References2
OSV
OSV
added 2025/10/17 11:09 a.m.10 views

OESA-2025-2471 wireshark security update

Security Fixes: MONGO dissector infinite loop in Wireshark 4.4.0 to 4.4.9 and 4.2.0 to 4.2.13 allows denial of serviceCVE-2025-11626...

5.5CVSS6.9AI score0.00112EPSS
SaveExploits0References2
Rows per page
Query Builder