PYSEC-2026-1834 Possible Infinite Loop when PdfWriter(clone_from) is used with a PDF

Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This infinite loop blocks the current process and can utilize a single core of the CPU by 100%. It does not affect memory usage. That is, for example, the case when the pypdf-user manipulates an incomi...

Possible Infinite Loop when PdfWriter(clone_from) is used with a PDF

ImpactAn attacker who uses this vulnerability can craft a PDF which leads to an infinite loop.This infinite loop blocks the current process and can utilize a single core of the CPU by 100%. It does not affect memory usage.That is, for example, the case when the pypdf-user manipulates an incoming...

ghostscript:gs_device_pdfwrite_fuzzer: Crash in igc_reloc_struct_ptr

Detailed Report: https://oss-fuzz.com/testcase?key=4692631274979328 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7c55ffffc152 Crash State: igcrelocstructptr...

ghostscript:gs_device_pdfwrite_opts_fuzzer: Global-buffer-overflow in gs_scan_token

Detailed Report: https://oss-fuzz.com/testcase?key=6142763745214464 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwriteoptsfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x5735759fae60 Crash State:...

ghostscript:gs_device_pdfwrite_fuzzer: Heap-buffer-overflow in gsicc_create_getv2buffer

Detailed Report: https://oss-fuzz.com/testcase?key=4923039292129280 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ 12 Crash Address: 0x514000001994 Crash State:...

ghostscript:gs_device_pdfwrite_opts_fuzzer: Crash in chunk_free_object

Detailed Report: https://oss-fuzz.com/testcase?key=5145287591526400 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwriteoptsfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000045e066 Crash State: chunkfreeobject...

SUSE CVE-2019-7397

In ImageMagick before 7.0.8-25 and GraphicsMagick through 1.3.31, several memory leaks exist in WritePDFImage in coders/pdf.c...

ghostscript:gs_device_pdfwrite_fuzzer: Heap-buffer-overflow in sputs

Detailed Report: https://oss-fuzz.com/testcase?key=4993238444670976 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x6310000b0830 Crash State: sputs...

ghostscript:gs_device_pdfwrite_opts_fuzzer: Heap-buffer-overflow in Ins_ALIGNRP

Detailed Report: https://oss-fuzz.com/testcase?key=5872308715913216 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwriteoptsfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x62a00265ec04 Crash State:...

ghostscript:gs_device_pdfwrite_fuzzer: Stack-buffer-overflow in gs_type2_interpret

Detailed Report: https://oss-fuzz.com/testcase?key=4704787672727552 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address: 0x7fff31529760 Crash State:...

ghostscript:gs_device_pdfwrite_fuzzer: Crash in Ins_ISECT

Detailed Report: https://oss-fuzz.com/testcase?key=5984645832900608 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x633000071468 Crash State: InsISECT RunIns...

ghostscript:gs_device_pdfwrite_fuzzer: Heap-use-after-free in pdfi_cidtype2_get_glyph_index

Detailed Report: https://oss-fuzz.com/testcase?key=4748952594939904 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x63100004c716 Crash State:...

ghostscript:gs_device_pdfwrite_fuzzer: Heap-use-after-free in gx_device_forward_finalize

Detailed Report: https://oss-fuzz.com/testcase?key=6094380158550016 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x61c000000910 Crash State:...

ghostscript:gs_device_pdfwrite_fuzzer: Heap-buffer-overflow in Ins_JROF

Detailed Report: https://oss-fuzz.com/testcase?key=6196157350543360 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6310000ef41d Crash State: InsJROF...

Microsoft IE PDF文件信息泄露漏洞

BUGTRAQ ID: 37117 CVECAN ID: CVE-2009-4073 Internet Explorer是Windows操作系统中默认捆绑的WEB浏览器。 Internet Explorer中的打印功能允许远程攻击者发现本地路径名和用户名。在使用Internet Explorer以PDF形式打印本地保存的网页时，从本地网页所生成的PDF文档的dc:title中可能泄露文件路径的前63个字节。 Microsoft Internet Explorer 8.0 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer...

[Full-Disclosure] Get admin rights using Doro (pdf creator)

Hi, a few days ago i discovered a bug in Doro. Doro is a free tool to create pdf files from any windows program. After installing Doro you have a new printer called 'Doro PDF Writer'. If you select 'Print' the spooler calls the printer filter 'doro.dll'. The 'doro.dll' then starts 'doro.exe' and ...