pylibemu

Pylibemu |version badge| |downloads badge| .. |version badge| image:: https://img.shields.io/pypi/v/pylibemu.svg :target: https://pypi.python.org/pypi/pylibemu/ .. |downloads badge| image:: https://img.shields.io/pypi/dm/pylibemu.svg :target: https://pypi.python.org/pypi/pylibemu/ Pylibemu is a...

CVE-2025-64512

CVE-2025-64512 – pdfminer.six Deserialization PoC Overview This proof-of-concept demonstrates a vulnerability in pdfminer.six CVE-2025-64512 that can lead to arbitrary command execution when a malicious PDF is processed. The exploit uses a crafted PDF that references a malicious, gzip-compressed...

EUVD-2026-104648

Pillow: Infinite loop in PdfParser.rewritepages on page tree Parent cycle...

CVE-2026-96640

Pillow is a Python imaging library. From 5.1.0 until 13.0.0, PdfParser.linearizepagetree in src/PIL/PdfParser.py treats a PDF /Pages graph as a tree without tracking duplicate indirect references. When Image.save..., format="PDF", append=True processes an attacker-controlled existing PDF whose...

CVE-2023-33733

CODE INJECTION VULNERABILITY IN REPORTLAB PYTHON LIBRARY tl;dr This write-up details how an RCE in Reportlab - was found and exploited. Due to the prevalence of Reportlab in HTML to PDF processing, this vulnerability may be reachable in many applications that process PDF files, making this an...

GHSA-JG86-V3JV-HRPM Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id)

============================================================================ Quadratic-time DoS in PDF saveall PdfParser.nextobjectid Location: src/PIL/PdfParser.py:629 in nextobjectid Commit: a707c6b21c313880d0771e54965d142dd42358b6...

Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id)

============================================================================ Quadratic-time DoS in PDF saveall PdfParser.nextobjectid Location: src/PIL/PdfParser.py:629 in nextobjectid Commit: a707c6b21c313880d0771e54965d142dd42358b6...

EUVD-2026-104656

Pillow: Quadratic-time DoS in PDF saveall PdfParser.nextobjectid...

EUVD-2026-104601

Pillow: PdfParser can recurse without limit in getvalue and linearizepagetree...

Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree()

Summary PdfParser's getvalue can recurse without any limit and crash with an uncaught RecursionError. It is reachable through Image.saveim, fp=, format="PDF", append=True when the existing PDF file is attacker-controlled. This is the same class of bug as...

CVE-2026-96640 Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion

Pillow is a Python imaging library. From 5.1.0 until 13.0.0, PdfParser.linearizepagetree in src/PIL/PdfParser.py treats a PDF /Pages graph as a tree without tracking duplicate indirect references. When Image.save..., format="PDF", append=True processes an attacker-controlled existing PDF whose...

CVE-2026-96640

The Pillow Python imaging library versions 5.1.0 through 13.0.0 are vulnerable to a resource exhaustion issue in the PdfParser.linearize_page_tree() function located in src/PIL/PdfParser.py . The root cause is that the parser treats a PDF /Pages graph as a tree without tracking duplicate indirect...

EUVD-2026-107570

Pillow is a Python imaging library. From 5.1.0 until 13.0.0, PdfParser.linearizepagetree in src/PIL/PdfParser.py treats a PDF /Pages graph as a tree without tracking duplicate indirect references. When Image.save..., format="PDF", append=True processes an attacker-controlled existing PDF whose...

CVE-2026-113026

A flaw was found in the PDF component of chromium-browser. A remote attacker could exploit this memory corruption issue by convincing a user to visit a specially crafted HTML page. Successful exploitation allows the attacker to read sensitive memory within the application sandbox, resulting in...

CVE-2022-45025

CVE-2022-45025 Command injection via PDF import in Markdown Preview Enhanced VSCode, Atom Description The Mume markdown tool library was vulnerable to command injection due to use of spawn command with shell: true option. This could allow an attacker to achieve arbitary code execution by tricking...

CVE-2026-113786

A flaw was found in pypdf. A remote attacker could trigger a Denial of Service DoS or unexpected behavior by enticing a user or service to process a specially crafted PDF document. When an image marked with a JPEG filter is loaded, pypdf fails to restrict decoding to the JPEG format before passin...

CVE-2026-113795

A flaw was found in pypdf. A remote attacker could cause a Denial of Service DoS by convincing a user or application to process a specially crafted PDF document. By providing a PDF stream configured with an excessive number of filters or filters that pass around large volumes of data, an attacker...

CVE-2026-113793

A flaw was found in pypdf. This vulnerability allows a remote attacker to cause a Denial of Service DoS by providing a specially crafted PDF document containing cyclic tree structures. When an application attempts to remove an object from the cyclic structure, the library enters an infinite loop,...

CVE-2026-113791

A flaw was found in pypdf. A remote attacker could exploit this vulnerability by providing a specially crafted PDF file containing content streams with an excessive number of small operations. When parsed, this causes the library to allocate disproportionate amounts of memory, potentially leading...

CVE-2026-113790

A flaw was found in pypdf. A remote attacker can trigger a Denial of Service DoS by supplying a specially crafted PDF document containing arrays or dictionaries with an excessive number of elements. During parsing, the application consumes large amounts of memory, which can lead to resource...