116 matches found
openSUSE 16 Security Update : python-PyPDF2 (openSUSE-SU-2026:21589-1)
The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21589-1 advisory. Changes in python-PyPDF2: - CVE-2026-59937: possible long runtimes for repeated malformed cross-reference entries bsc1271147 - CVE-2026-59936:...
OPENSUSE-SU-2026:21589-1 Security update for python-PyPDF2
This update for python-PyPDF2 fixes the following issues: Changes in python-PyPDF2: - CVE-2026-59937: possible long runtimes for repeated malformed cross-reference entries bsc1271147 - CVE-2026-59936: possible infinite loop for not terminated inline images bsc1271146...
Security update for python-PyPDF2 (moderate)
openSUSE security update: security update for python-pypdf2 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21589-1 Rating: moderate References: bsc1271146 bsc1271147 Cross-References: CVE-2026-59936 CVE-2026-59937 Affected Products: openSUSE Leap...
ROS-20260817-73-0204
The vulnerability in python-PyPDF2 relates to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20260817-73-0206
The vulnerability in python-PyPDF2 is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ROS-20260729-73-0007
The vulnerability in python-PyPDF2 relates to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20260729-73-0005
The vulnerability in python-PyPDF2 is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ROS-20260729-73-0001
The vulnerability in python-PyPDF2 is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
ROS-20260729-73-0002
The vulnerability in python-PyPDF2 is related to excessive iteration. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260728-73-0021
The vulnerability in python-PyPDF2 is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
ROS-20260728-73-0018
The vulnerability in python-PyPDF2 is related to errors in processing XML entities. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ROS-20260728-73-0020
The vulnerability in python-PyPDF2 is related to excessive iteration. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260728-73-0022
The vulnerability in python-PyPDF2 is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
PYSEC-2026-3008 pypdf and PyPDF2 possible Infinite Loop when a comment isn't followed by a character
Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop if parsecontentstream is executed. This infinite loop blocks the current process and can utilize a single core of the CPU by 100%. It does not affect memory usage. That is, for example, the case if the...
document-sorter (0.1.0), zonesmart-utils (>=0.4.0, <=0.4.1) potentially affected by CVE-2023-36807 via pypdf2 (2.10.5)
pypdf2 PYPI version 2.10.5 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf2 and may be impacted: - document-sorter 0.1.0 - zonesmart-utils =0.4.0, =0.4.1 Source cves: CVE-2023-36807 Source advisory: OSV:PYSEC-2026-1836...
PYSEC-2026-1835 pypdf and PyPDF2 possible Infinite Loop when a comment isn't followed by a character
Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop if parsecontentstream is executed. This infinite loop blocks the current process and can utilize a single core of the CPU by 100%. It does not affect memory usage. That is, for example, the case if the...
3m (>=0.1.0, <=0.1.3), a2d-diary (>=0.1.0, <=0.1.5) +1724 more potentially affected by CVE-2023-36464 via pypdf2 (>=2.4.2, <=3.0.1)
pypdf2 PYPI version =2.4.2, =0.1.0, =0.1.0, =1.1.0, =0.1.32, =0.0.0.1, =0.0.1.44, =0.0.1, =0.2.2.716, =0.1.4, =1.0.3, =0.1.3, =0.2.0, =0.4.2 - adame 0.2.2 and more Source cves: CVE-2023-36464 Source advisory: OSV:PYSEC-2026-1835...
PYSEC-2026-1836 PyPDF2 vulnerable to possible Infinite Loop when reading malformed objects
Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This infinite loop blocks the current process and can utilize a single core of the CPU by 100%. It does not affect memory usage. That is, for example, the case if the user extracted metadata from such ...
addpage (0.2.0), amazon-textract-helper (>=0.0.2, <=0.0.30) +87 more potentially affected by CVE-2023-36810 via pypdf2 (>=1.24.0, <=1.27.5)
pypdf2 PYPI version =1.24.0, =0.0.2, =0.0.1, =0.0.2, =0.0.1, =0.1.1, =0.2.0, =0.1.0, =0.0.1, =1.1.0, =0.9.0, =1.0.0, =0.0.6, =0.0.59 and more Source cves: CVE-2023-36810 Source advisory: OSV:PYSEC-2026-1837...