CVE-2026-84311 pypdf: Possible long runtimes/large memory usage when extracting XForm objects

pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/page.py PageObject.extracttext and PageObject.extractxformtext to traverse a directed acyclic graph of reused form XObjects in which each form invokes a child multiple times,...

CVE-2026-84310 pypdf: Possible long runtimes/large memory usage when retrieving outlines

pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/doccommon.py getoutline to consume long runtimes and large amounts of memory when retrieving document outlines with large numbers of entries or deeply nested reused paths becaus...

CVE-2017-9096-iText-XXE

CVE-2017-9096 1. Creating the malicious PDF containing XXE Get a PDF containing a form: root@kitploit: wget https://www.pdfscripting.com/public/FreeStuff/PDFSamples/ModifySubmitExample.pdf -O input.pdf Decompress PDF To do that you need to decompress the PDF with qpdf --qdf...

CVE-2026-82398

A flaw was found in pypdf. An attacker can craft a PDF that causes long runtimes when the readuntilwhitespace function processes a stream containing a long sequence of bytes without whitespace. This occurs due to inefficient algorithmic complexity, where the function repeatedly performs immutable...

cve-2025-54988-VulnTikaProject

Apache Tika Vulnerability Testing Project This is a Spring Boot application that uses Apache Tika 3.2.1 for document processing and text extraction. Prerequisites Have Docker Usage ./start-app.sh or docker compose up -d CVE execution Upload your malicious PDF...

DEBIAN-CVE-2026-82398

pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, an attacker can craft a PDF that causes long runtimes when the pypdf/utils.py function readuntilwhitespace reads a stream containing a long run of bytes without whitespace. The function repeatedly performs immutable bytes...

CVE-2026-82398 pypdf: Inefficient handling of non-whitespace inputs in read_until_whitespace

pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, an attacker can craft a PDF that causes long runtimes when the pypdf/utils.py function readuntilwhitespace reads a stream containing a long run of bytes without whitespace. The function repeatedly performs immutable bytes...

cisco-CVE-2023-31488

About Security researcher: ly1g3, ly1g3attuta.io GPG fingerprint: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Overview: Email to zero click RCE as root - Remote Code Execution/Memory Corruption/ROP-chain CVE: CVE-2023-31488 Timeline: Discovered - ly1g3...

CVE-2025-64512-pdfminer-PoC

CVE-2025-64512 — pdfminer.six CMapDB Deserialisierungs-PoC Proof-of-Concept für eine Deserialisierungsschwachstelle in pdfminer.six, die beim Parsen eines präparierten PDFs zur Ausführung beliebigen Codes führt. ZWECK / HAFTUNGSAUSSCHLUSS Dieses Repository wird ausschließlich für Bildungszwecke u...

PS-2017-13---CVE-2018-9950

Sicherheitslücke in Foxit Reader: Informationsoffenlegung durch Out-of-Bounds-Lesezugriff beim PDF-Parsing Schwachstelle Unsachgemäße Einschränkung von Operationen innerhalb der Grenzen eines Speicherpuffers Schwachstellenbeschreibung Diese Schwachstelle ermöglicht es entfernten Angreifern,...

xpdf-docker

Immagini Docker di Xpdf Questa repository contiene immagini docker per Xpdf versione 4.04, che è vulnerabile a CVE-2022-30524. Creazione delle immagini 📦 Questa repository contiene le immagini in 3 varianti: bullseye/gcc : Debian "bullseye", compilata con gcc bullseye/afl : Debian "bullseye",...

CVE-2025-66516-Writeup-POC

CVE-2025-66516: Kritische XXE-Sicherheitslücke in Apache Tika Zusammenfassung CVE-2025-66516 ist eine kritische XML-External-Entity-XXE-Einschleusungssicherheitslücke in Apache Tika mit einem CVSS-Score von 10,0 maximale Schwere. Die Sicherheitslücke ermöglicht es entfernten Angreifern, beliebige...

cve-2018-15968

Vulnerabilità di Information Disclosure per lettura fuori dai limiti in Adobe Reader Vulnerabilità Vulnerabilità di restrizione impropria delle operazioni entro i limiti di un buffer di memoria Descrizione della vulnerabilità Questa vulnerabilità consente a malintenzionati remoti di divulgare...

CVE-2026-54071 BabelDOC: Arbitrary Code Execution via CMap Pickle Deserialization in babeldoc/pdfminer/cmapdb.py

BabelDOC is a document translation tool. Prior to 0.6.3, BabelDOC's vendored PDF parser in babeldoc/pdfminer/cmapdb.py deserializes untrusted pickle data when CMapDB.loaddata loads CMap files. PDF-controlled Encoding or CMapName values and embedded PostScript usecmap operators can reach this sink...

EUVD-2026-58517

A vulnerability was found in EnzoVezzaro mcp-dominican-layer up to 39dd373786712650097ad31db27d5c477c8f9c82. This affects the function parse-pdf of the file src/index.ts of the component PDF Parsing. Performing a manipulation of the argument pdfUrl results in server-side request forgery. It is...

CVE-2026-19752

A vulnerability was found in EnzoVezzaro mcp-dominican-layer up to 39dd373786712650097ad31db27d5c477c8f9c82. This affects the function parse-pdf of the file src/index.ts of the component PDF Parsing. Performing a manipulation of the argument pdfUrl results in server-side request forgery. It is...

UBUNTU-CVE-2026-71852

pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause long runtimes and large memory consumption when pypdf/font.py function Font.collectcidcharacterwidths expands unusually large CID font /W width ranges or excessive width entries during text extractio...

GHSA-FWG2-594C-JP42 pypdf: Possible long runtimes/large memory usage for large CID font width ranges

Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consumption. This requires parsing the font width entries of a font with unusually large values, for example during text extraction. Patches This has been fixed in pypdf==6.15.0. Workaroun...

CVE-2026-20346

A vulnerability in the PDF file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in PDF file...

CVE-2026-11803 PDF File Parsing Out-of-Bounds Read Vulnerability in Autodesk Revit

A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...