Lucene search
+L

3547 matches found

osv_debian
osv_debian
•added 2026/03/10 10:16 p.m.•9 views

DEBIAN-CVE-2026-31826

pypdf is a free and open-source pure-python PDF library. Prior to 6.8.0, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing a content stream with a rather large /Length value, regardless of the actual data length inside the stream. Thi...

5.5CVSS6.5AI score0.00186EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2026/03/10 10:16 p.m.•16 views

UBUNTU-CVE-2026-31826

pypdf is a free and open-source pure-python PDF library. Prior to 6.8.0, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing a content stream with a rather large /Length value, regardless of the actual data length inside the stream. Thi...

6.8CVSS6.5AI score0.00186EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/03/10 10:16 p.m.•15 views

CVE-2026-31826

pypdf is a free and open-source pure-python PDF library. Prior to 6.8.0, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing a content stream with a rather large /Length value, regardless of the actual data length inside the stream. Thi...

6.8CVSS6.5AI score0.00186EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2026/03/10 9:36 p.m.•18 views

CVE-2026-31826 pypdf: manipulated stream length values can exhaust RAM

pypdf is a free and open-source pure-python PDF library. Prior to 6.8.0, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing a content stream with a rather large /Length value, regardless of the actual data length inside the stream. Thi...

6.8CVSS5.7AI score
SaveExploits0References5
attackerkb
attackerkb
•added 2026/03/10 9:36 p.m.•12 views

CVE-2026-31826

pypdf is a free and open-source pure-python PDF library. Prior to 6.8.0, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing a content stream with a rather large /Length value, regardless of the actual data length inside the stream. Thi...

6.8CVSS6.5AI score0.00186EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2026/03/10 9:36 p.m.•46 views

CVE-2026-31826 pypdf: manipulated stream length values can exhaust RAM

pypdf is a free and open-source pure-python PDF library. Prior to 6.8.0, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing a content stream with a rather large /Length value, regardless of the actual data length inside the stream. Thi...

6.8CVSS0.00186EPSS
SaveExploits0References3
CVE
CVE
•added 2026/03/10 9:36 p.m.•69 views

CVE-2026-31826

The CVE-2026-31826 vulnerability affects the pypdf library prior to 6.8.0. When parsing a content stream with a very large /Length value (independent of the data length), an attacker can trigger excessive memory usage, impacting availability. The issue is resolved in version 6.8.0. Exploit detail...

6.8CVSS6.5AI score0.00186EPSS
SaveExploits0References3Affected Software1
vulnersOsv
vulnersOsv
•added 2026/03/10 9:36 p.m.•1 views

a-data-processing (0.0.1), ab-data-processing (0.0.1) +615 more potentially affected by CVE-2026-31826 via pypdf (>=3.1.0, <=6.7.5)

pypdf PYPI version =3.1.0, =0.1.1, =0.9.1, =0.0.2, =0.0.1, =0.1.4, =0.1.0a0.dev0, =0.2.0a0, =0.0.1, =0.0.4, =0.0.9 and more Source cves: CVE-2026-31826 Source advisory: MEND:CVE-2026-31826...

6.8CVSS6.4AI score0.00186EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2026/03/10 9:36 p.m.•6 views

CVE-2026-31826 pypdf: manipulated stream length values can exhaust RAM

pypdf is a free and open-source pure-python PDF library. Prior to 6.8.0, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing a content stream with a rather large /Length value, regardless of the actual data length inside the stream. Thi...

6.8CVSS6.5AI score0.00186EPSS
SaveExploits0References3
Mend
Mend
•added 2026/03/10 9:36 p.m.•11 views

CVE-2026-31826

pypdf is a free and open-source pure-python PDF library. Prior to 6.8.0, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing a content stream with a rather large /Length value, regardless of the actual data length inside the stream. Thi...

6.8CVSS6.5AI score0.00186EPSS
SaveExploits0References9
Debian CVE
Debian CVE
•added 2026/03/10 9:36 p.m.•28 views

CVE-2026-31826

pypdf is a free and open-source pure-python PDF library. Prior to 6.8.0, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing a content stream with a rather large /Length value, regardless of the actual data length inside the stream. Thi...

6.8CVSS6.5AI score0.00186EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2026/03/10 12:24 a.m.•18 views

SUSE CVE-2026-28804

pypdf is a free and open-source pure-python PDF library. Prior to version 6.7.5, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires accessing a stream which uses the /ASCIIHexDecode filter. This issue has been patched in version 6.7.5...

6.5CVSS5.8AI score0.00535EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/03/10 12:00 a.m.•10 views

PT-2026-24480

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.8.0 Description pypdf is a free and open-source pure-python PDF library. A crafted PDF file can cause excessive memory usage when parsed, specifically when processing a content stream with a large /Length value,...

6.8CVSS6.4AI score0.00186EPSS
SaveExploits0References29
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/10 12:00 a.m.•5 views

CVE-2026-31826: Allocation of Resources Without Limits or Throttling

pypdf is a free and open-source pure-python PDF library. Prior to 6.8.0, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing a content stream with a rather large /Length value, regardless of the actual data length inside the stream. Thi...

6.8CVSS6.5AI score0.00186EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/03/10 12:00 a.m.•27 views

pypdf 安全漏洞

pypdf is an open-source, free Python library developed by py-pdf. It allows for splitting, merging, cropping, and converting pages within PDF files. Prior to version 6.8.0, pypdf had a security vulnerability. This vulnerability stemmed from improper memory usage when parsing PDF content streams...

6.8CVSS6.5AI score0.00186EPSS
SaveExploits0References5
Veracode
Veracode
•added 2026/03/07 5:12 a.m.•29 views

Inefficient Decoding

pypdf is vulnerable to inefficient decoding of ASCIIHexDecode streams. The vulnerability is due to an attacker being able to craft a PDF which leads to long runtimes, where accessing a stream uses the /ASCIIHexDecode filter and can be exploited by attackers to cause a denial of service...

6.9CVSS5.9AI score0.00535EPSS
SaveExploits0References4Affected Software1
Tenable Nessus
Tenable Nessus
•added 2026/03/07 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2026-28804

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pypdf is a free and open-source pure-python PDF library. Prior to version 6.7.5, an attacker who uses this vulnerability can craft a PDF which leads to long...

6.9CVSS5.8AI score0.00535EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/03/06 9:21 a.m.•23 views

CVE-2026-28804

A flaw was found in pypdf, a pure-python PDF library. A remote attacker can exploit this vulnerability by crafting a malicious PDF file that utilizes the /ASCIIHexDecode filter. Processing this specially crafted PDF can lead to excessively long runtimes, resulting in a Denial of Service DoS for t...

6.9CVSS5.9AI score0.00535EPSS
SaveExploits0References7
osv_debian
osv_debian
•added 2026/03/06 7:16 a.m.•12 views

DEBIAN-CVE-2026-28804

pypdf is a free and open-source pure-python PDF library. Prior to version 6.7.5, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires accessing a stream which uses the /ASCIIHexDecode filter. This issue has been patched in version 6.7.5...

5.3CVSS5.8AI score0.00535EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2026/03/06 7:16 a.m.•30 views

UBUNTU-CVE-2026-28804

pypdf is a free and open-source pure-python PDF library. Prior to version 6.7.5, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires accessing a stream which uses the /ASCIIHexDecode filter. This issue has been patched in version 6.7.5...

6.9CVSS5.8AI score0.00535EPSS
SaveExploits0References6
Rows per page
Query Builder