CVE-2026-113791 pypdf: Possible large memory usage when parsing content streams

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can craft a PDF containing a content stream with many small operations, causing parsing to consume large amounts of memory. This issue is fixed in version 6.21.0...

CVE-2026-113791

The pypdf pure-python PDF library is vulnerable to uncontrolled resource consumption (CWE-400, CWE-770) in versions prior to 6.21.0 . An attacker can craft a malicious PDF file containing a content stream with numerous small operations, which forces the parser to consume excessive amounts of memo...

CVE-2026-113790

The pypdf pure-python PDF library is vulnerable to uncontrolled resource consumption prior to version 6.21.0 . An attacker can craft a malicious PDF containing arrays or dictionaries with a large number of elements, which causes the library to consume excessive amounts of memory during parsing. T...

CVE-2026-113790 pypdf: Possible large memory usage when parsing arrays and dictionaries

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can craft a PDF containing arrays or dictionaries with many elements, causing parsing to consume large amounts of memory. This issue is fixed in version 6.21.0...

CVE-2026-113790 pypdf: Possible large memory usage when parsing arrays and dictionaries

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can craft a PDF containing arrays or dictionaries with many elements, causing parsing to consume large amounts of memory. This issue is fixed in version 6.21.0...

CVE-2026-113790 pypdf: Possible large memory usage when parsing arrays and dictionaries

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can craft a PDF containing arrays or dictionaries with many elements, causing parsing to consume large amounts of memory. This issue is fixed in version 6.21.0...

CVE-2026-113789 pypdf: Possible long runtimes/large memory usage when retrieving form fields

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can craft a PDF that causes large memory usage or long runtimes when an application retrieves the document's form fields. This issue is fixed in version 6.21.0...

CVE-2026-113789 pypdf: Possible long runtimes/large memory usage when retrieving form fields

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can craft a PDF that causes large memory usage or long runtimes when an application retrieves the document's form fields. This issue is fixed in version 6.21.0...

CVE-2026-113789

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can craft a PDF that causes large memory usage or long runtimes when an application retrieves the document's form fields. This issue is fixed in version 6.21.0...

CVE-2026-113789

The pypdf pure-python PDF library is vulnerable to uncontrolled resource consumption (CWE-400, CWE-407) in versions prior to 6.21.0 . An attacker can craft a malicious PDF file that triggers large memory usage or long runtimes when an application attempts to retrieve the document's form fields . ...

CVE-2026-113789

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can craft a PDF that causes large memory usage or long runtimes when an application retrieves the document's form fields. This issue is fixed in version 6.21.0...

CVE-2026-113789 pypdf: Possible long runtimes/large memory usage when retrieving form fields

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can craft a PDF that causes large memory usage or long runtimes when an application retrieves the document's form fields. This issue is fixed in version 6.21.0...

CVE-2026-19630

In a BIND resolver, inbound DNS protocol messages with a particular structure will result in additional processing, with no limit imposed by BIND. A DNS message with a maliciously large number of such structures will cause BIND to consume disproportionate amounts of CPU time and memory during...

CVE-2026-19630 Amplified resource exhaustion in inbound message processing

In a BIND resolver, inbound DNS protocol messages with a particular structure will result in additional processing, with no limit imposed by BIND. A DNS message with a maliciously large number of such structures will cause BIND to consume disproportionate amounts of CPU time and memory during...

CVE-2026-19630

The BIND resolver is vulnerable to an amplified resource exhaustion attack due to how it handles inbound DNS protocol messages. Specifically, messages with a particular structure trigger additional processing without imposed limits. A maliciously crafted message containing a large number of these...

CVE-2026-19630 Amplified resource exhaustion in inbound message processing

In a BIND resolver, inbound DNS protocol messages with a particular structure will result in additional processing, with no limit imposed by BIND. A DNS message with a maliciously large number of such structures will cause BIND to consume disproportionate amounts of CPU time and memory during...

CVE-2026-58064

The Redis protocol implementation in Apache bRPC allowed inline command parsing to allocate and copy the full connection buffer before a complete CRLF-terminated command was available. A remote attacker with access to a Redis-protocol bRPC service could send long inline inputs without a terminati...

CVE-2026-58064

The Redis protocol implementation in Apache bRPC versions prior to 1.18.0 is vulnerable to a resource management error. The root cause is that the inline command parser allocates and copies the entire connection buffer based on its current size before determining the command boundary, and the red...

CVE-2026-58064 Apache bRPC: Denial of Service via Unbounded Redis Inline Command Allocation

The Redis protocol implementation in Apache bRPC allowed inline command parsing to allocate and copy the full connection buffer before a complete CRLF-terminated command was available. A remote attacker with access to a Redis-protocol bRPC service could send long inline inputs without a terminati...

EUVD-2026-107175

The Redis protocol implementation in Apache bRPC allowed inline command parsing to allocate and copy the full connection buffer before a complete CRLF-terminated command was available. A remote attacker with access to a Redis-protocol bRPC service could send long inline inputs without a terminati...