50 matches found
CVE-2026-82035
PyMuPDF through 1.28.2, fixed in commit b2c8f3a, contains a path traversal vulnerability in the font branch of extractobjects in src/main.py, where the output filename is constructed by joining a document-controlled BaseFont name directly onto the user-supplied output directory without stripping...
CVE-2026-82035
A flaw was found in PyMuPDF. This path traversal vulnerability exists in the extractobjects function, specifically within the font branch. A remote attacker can exploit this by providing a specially crafted PDF, EPUB, XPS, or FB2 file. The vulnerability allows the attacker to use encoded path...
EUVD-2026-77764
PyMuPDF through 1.28.2, fixed in commit b2c8f3a, contains a path traversal vulnerability in the font branch of extractobjects in src/main.py, where the output filename is constructed by joining a document-controlled BaseFont name directly onto the user-supplied output directory without stripping...
CVE-2026-82035
PyMuPDF versions through 1.28.2 contain a path traversal vulnerability in the font branch of extract_objects() in src/__main__.py. The root cause is that a document-controlled BaseFont name is joined directly onto the user-supplied output directory without stripping path separators or dot-dot seq...
CVE-2026-82035
PyMuPDF through 1.28.2, fixed in commit b2c8f3a, contains a path traversal vulnerability in the font branch of extractobjects in src/main.py, where the output filename is constructed by joining a document-controlled BaseFont name directly onto the user-supplied output directory without stripping...
CVE-2026-82035 PyMuPDF 1.28.2 Path Traversal via extract_objects() Font Branch
PyMuPDF through 1.28.2, fixed in commit b2c8f3a, contains a path traversal vulnerability in the font branch of extractobjects in src/main.py, where the output filename is constructed by joining a document-controlled BaseFont name directly onto the user-supplied output directory without stripping...
CVE-2026-82035 PyMuPDF 1.28.2 Path Traversal via extract_objects() Font Branch
PyMuPDF through 1.28.2, fixed in commit b2c8f3a, contains a path traversal vulnerability in the font branch of extractobjects in src/main.py, where the output filename is constructed by joining a document-controlled BaseFont name directly onto the user-supplied output directory without stripping...
PyMuPDF has a path traversal in _main_.py
A path traversal and arbitrary file write vulnerability exist in the embedded get function in 'main.py' in PyMuPDF version, 1.26.5...
PT-2026-59623
A path traversal and arbitrary file write vulnerability exist in the embedded get function in ' main .py' in PyMuPDF version, 1.26.5...
Security update for python-PyMuPDF (important)
openSUSE security update: security update for python-pymupdf ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20887-1 Rating: important References: bsc1259921 Cross-References: CVE-2026-3029 Affected Products: openSUSE Leap 16.0...
OPENSUSE-SU-2026:20887-1 Security update for python-PyMuPDF
This update for python-PyMuPDF fixes the following issues: Changes in python-PyMuPDF: - CVE-2026-3029: Fixed path traversal and arbitrary file write via the embeddedget function in main.py bsc1259921...
Integer Overflow or Wraparound
Overview PyMuPDF is an A high performance Python library for data extraction, analysis, conversion & manipulation of PDF and other documents. Affected versions of this package are vulnerable to Integer Overflow or Wraparound in the pdfloadimageimp function. An attacker can achieve arbitrary code...
10xscale-agentflow-cli (>=0.3.0, <=0.3.1), 3m (>=0.1.0, <=0.1.3) +2883 more potentially affected by CVE-2026-3308 via pymupdf (>=1.16.2, <=1.28.2)
pymupdf PYPI version =1.16.2, =0.3.0, =0.1.0, =0.18.0, =0.1.1001, =0.1.0, =1.1.0, =0.0.4.80, =5.0.6 - aait-store-cut-part-001 0.0.1 - aait-store-cut-part-002 0.0.1 - aait-store-cut-part-003 0.0.1 - aait-store-cut-part-004 0.0.1 - aait-store-cut-part-005 0.0.1 - aait-store-cut-part-006 0.0.1 -...
OPENSUSE-SU-2026:10416-1 python313-PyMuPDF-1.27.2.2-1.1 on GA media
These are all security issues fixed in the python313-PyMuPDF-1.27.2.2-1.1 package on the GA media of openSUSE Tumbleweed...
Path Traversal
PyMuPDF is vulnerable to Path Traversal. The vulnerability is due to improper validation of file paths in the embedded get function in main.py, allowing attackers to manipulate paths and write files outside the intended directory, leading to arbitrary file write...
SUSE CVE-2026-3029
A path traversal and arbitrary file write vulnerability exist in the embedded get function in 'main.py' in PyMuPDF version, 1.26.5...
Directory Traversal
Overview PyMuPDF is an A high performance Python library for data extraction, analysis, conversion & manipulation of PDF and other documents. Affected versions of this package are vulnerable to Directory Traversal via the embeddedget function if the derived output path is not supplied with...
GHSA-CXQH-P2W9-FMR7 PyMuPDF has a path traversal in _main_.py
A path traversal and arbitrary file write vulnerability exist in the embedded get function in 'main.py' in PyMuPDF version, 1.26.5...
PyMuPDF has a path traversal in _main_.py
A path traversal and arbitrary file write vulnerability exist in the embedded get function in 'main.py' in PyMuPDF version, 1.26.5...