140 matches found
CVE-2026-125107
Muhammara is a node module with c/cpp bindings to modify PDF with JavaScript for node or electron. Prior to 6.0.5, Muhammara PDFParser::CreateFilterForStream in src/deps/PDFWriter/PDFParser.cpp dereferences a null PDFInteger pointer when a PDF stream uses the LZWDecode filter with a DecodeParms...
CVE-2026-125107 Muhammara: NULL pointer dereference in LZWDecode filter when DecodeParms omits EarlyChange key
Muhammara is a node module with c/cpp bindings to modify PDF with JavaScript for node or electron. Prior to 6.0.5, Muhammara PDFParser::CreateFilterForStream in src/deps/PDFWriter/PDFParser.cpp dereferences a null PDFInteger pointer when a PDF stream uses the LZWDecode filter with a DecodeParms...
CVE-2026-125107 Muhammara: NULL pointer dereference in LZWDecode filter when DecodeParms omits EarlyChange key
Muhammara is a node module with c/cpp bindings to modify PDF with JavaScript for node or electron. Prior to 6.0.5, Muhammara PDFParser::CreateFilterForStream in src/deps/PDFWriter/PDFParser.cpp dereferences a null PDFInteger pointer when a PDF stream uses the LZWDecode filter with a DecodeParms...
EUVD-2026-120461
Muhammara is a node module with c/cpp bindings to modify PDF with JavaScript for node or electron. Prior to 6.0.5, Muhammara PDFParser::CreateFilterForStream in src/deps/PDFWriter/PDFParser.cpp dereferences a null PDFInteger pointer when a PDF stream uses the LZWDecode filter with a DecodeParms...
CVE-2026-125107
The Muhammara node module, which provides c/cpp bindings for PDF manipulation in Node.js or Electron, is vulnerable to a NULL pointer dereference in PDFParser::CreateFilterForStream(). This occurs when a PDF stream uses the LZWDecode filter with a /DecodeParms dictionary that omits the EarlyChang...
CVE-2026-125107: julianhille MuhammaraJS: Muhammara is a node module with c/cpp bindings to modify PDF with JavaScript for node or electron
Muhammara is a node module with c/cpp bindings to modify PDF with JavaScript for node or electron. Prior to 6.0.5, Muhammara PDFParser::CreateFilterForStream in src/deps/PDFWriter/PDFParser.cpp dereferences a null PDFInteger pointer when a PDF stream uses the LZWDecode filter with a DecodeParms...
CLEANSTART-2023-QS36186 Buffer overflow in the PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser
Security vulnerability affects the podofo package. Buffer overflow in the PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser...
CLEANSTART-2023-OI99413 Heap-based buffer overflow in the PdfParser::ReadObjects function in base/PdfParser
Security vulnerability affects the podofo package. Heap-based buffer overflow in the PdfParser::ReadObjects function in base/PdfParser...
BIT-PILLOW-2026-112895 Pillow: Unbounded recursion parsing a PDF page tree or trailer chain (incomplete fix for CVE-2026-42310)
Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow can exhaust resources while parsing an existing PDF during an append operation. PdfParser follows page-tree child references without cycle or duplication tracking and follows previous-trailer chains with only an exact...
BIT-PILLOW-2026-112391 Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree()
Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow's PdfParser.getvalue can recurse without a limit while reading nested PDF objects. The parser follows attacker-controlled arrays and dictionaries when an existing PDF is opened for append. An attacker can provide a deeply nested...
PT-2026-123483
Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow can exhaust resources while parsing an existing PDF during an append operation. PdfParser follows page-tree child references without cycle or duplication tracking and follows previous-trailer chains with only an exact...
UBUNTU-CVE-2026-96640
Pillow is a Python imaging library. From 5.1.0 until 13.0.0, PdfParser.linearizepagetree in src/PIL/PdfParser.py treats a PDF /Pages graph as a tree without tracking duplicate indirect references. When Image.save..., format="PDF", append=True processes an attacker-controlled existing PDF whose...
CVE-2026-96640
Pillow is a Python imaging library. From 5.1.0 until 13.0.0, PdfParser.linearizepagetree in src/PIL/PdfParser.py treats a PDF /Pages graph as a tree without tracking duplicate indirect references. When Image.save..., format="PDF", append=True processes an attacker-controlled existing PDF whose...
Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree()
Summary PdfParser's getvalue can recurse without any limit and crash with an uncaught RecursionError. It is reachable through Image.saveim, fp=, format="PDF", append=True when the existing PDF file is attacker-controlled. This is the same class of bug as...
GHSA-254F-3936-288H Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree()
Summary PdfParser's getvalue can recurse without any limit and crash with an uncaught RecursionError. It is reachable through Image.saveim, fp=, format="PDF", append=True when the existing PDF file is attacker-controlled. This is the same class of bug as...
SUSE CVE-2026-112895
Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow can exhaust resources while parsing an existing PDF during an append operation. PdfParser follows page-tree child references without cycle or duplication tracking and follows previous-trailer chains with only an exact...
Pillow: Unbounded recursion parsing a PDF page tree or trailer chain (incomplete fix for CVE-2026-42310)
Summary When an application appends to an existing PDF with Image.save..., format="PDF", append=True, Pillow parses that file with PdfParser. Two recursive parsers have no effective bound. linearizepagetree follows /Kids with no visited set or depth limit, so a cyclic or duplicated page tree...
GHSA-P4WG-P73J-C528 Pillow: Unbounded recursion parsing a PDF page tree or trailer chain (incomplete fix for CVE-2026-42310)
Summary When an application appends to an existing PDF with Image.save..., format="PDF", append=True, Pillow parses that file with PdfParser. Two recursive parsers have no effective bound. linearizepagetree follows /Kids with no visited set or depth limit, so a cyclic or duplicated page tree...
EUVD-2026-104657
Pillow: Unbounded recursion parsing a PDF page tree or trailer chain incomplete fix for CVE-2026-42310...
Linux Distros Unpatched Vulnerability : CVE-2026-112895
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow can exhaust resources while parsing an existing PDF during an append operation. PdfParser...