3454 matches found
pypdf possibly loops infinitely when reading DCT inline images without EOF marker
Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsing the content stream of a page which has an inline image using the DCTDecode filter. Patches This has been fixed in pypdf==6.1.3. Workarounds If you cannot upgrade yet, consider...
PT-2025-43413
Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.1.3 Description A crafted PDF file can cause an infinite loop when parsed, specifically when processing the content stream of a page containing an inline image utilizing the DCTDecode filter. This issue requires parsi...
pypdf 安全漏洞
pypdf is py-pdf open source a free open source pure python PDF library . The ability to split, merge, crop and convert pages of a PDF file. A security vulnerability exists in pypdf versions prior to 6.1.3, which stems from parsing a stream of inline image page content using the DCTDecode filter,...
CVE-2025-62707: Excessive Iteration
pypdf is a free and open-source pure-python PDF library. Prior to version 6.1.3, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsing the content stream of a page which has an inline image using the DCTDecode filter. This has been fixed in...
PT-2025-48100
Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.4.0 Description pypdf is a free and open-source pure-python PDF library. An attacker can create a malicious PDF file that causes excessive memory consumption, up to 1 GB per stream, when parsing the content stream of ...
PT-2025-43414
Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.1.3 Description An attacker can create a malicious PDF file that causes excessive memory consumption when processed. This occurs when parsing the content stream of a page utilizing the LZWDecode filter. Recommendation...
pypdf 安全漏洞
pypdf is py-pdf open source a free open source pure python PDF library . The ability to split, merge, crop and convert pages of a PDF file. A security vulnerability exists in pypdf versions prior to 6.1.3, which stems from improper memory usage when parsing page content streams using the LZWDecod...
CVE-2025-62708: Improper Handling of Highly Compressed Data (Data Amplification)
pypdf is a free and open-source pure-python PDF library. Prior to version 6.1.3, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing the content stream of a page using the LZWDecode filter. This has been fixed in pypdf version 6.1.3...
EUVD-2025-24648
Malicious code in bioql PyPI...
EUVD-2023-1690
Malicious code in bioql PyPI...
EUVD-2023-1823
Malicious code in bioql PyPI...
EUVD-2023-1837
Malicious code in bioql PyPI...
EUVD-2023-2830
Malicious code in bioql PyPI...
Denial Of Service (DoS)
pypdf is vulnerable to Denial Of Service DoS. The vulnerability is due to uncontrolled resource consumption due to maliciously crafted PDFs using repeated FlateDecode filters that can exhaust system memory...
Linux Distros Unpatched Vulnerability : CVE-2025-55197
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pypdf is a free and open-source pure-python PDF library. Prior to version 6.0.0, an attacker can craft a PDF which leads to the RAM being exhausted. This requir...
Linux Distros Unpatched Vulnerability : CVE-2023-46250
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions 3.7.0 through 3.16.4 can craft a PDF which lea...
Linux Distros Unpatched Vulnerability : CVE-2023-36464
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pypdf is an open source, pure-python PDF library. In affected versions an attacker may craft a PDF which leads to an infinite loop if parsecontentstream is...
python311-pypdf-6.0.0-1.1 on GA media (moderate)
python311-pypdf-6.0.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15440-1 Rating: moderate Cross-References: CVE-2025-55197 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...
SUSE CVE-2025-55197
pypdf is a free and open-source pure-python PDF library. Prior to version 6.0.0, an attacker can craft a PDF which leads to the RAM being exhausted. This requires just reading the file if a series of FlateDecode filters is used on a malicious cross-reference stream. Other content streams are...
