Lucene search
+L

960 matches found

OSV
OSV
•added 2026/03/10 10:16 p.m.•7 views

DEBIAN-CVE-2026-31826

pypdf is a free and open-source pure-python PDF library. Prior to 6.8.0, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing a content stream with a rather large /Length value, regardless of the actual data length inside the stream. Thi...

5.5CVSS5.4AI score0.00179EPSS
SaveExploits0References1
OSV
OSV
•added 2026/03/10 10:16 p.m.•14 views

UBUNTU-CVE-2026-31826

pypdf is a free and open-source pure-python PDF library. Prior to 6.8.0, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing a content stream with a rather large /Length value, regardless of the actual data length inside the stream. Thi...

6.8CVSS5.8AI score0.00179EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/03/10 10:16 p.m.•12 views

CVE-2026-31826

pypdf is a free and open-source pure-python PDF library. Prior to 6.8.0, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing a content stream with a rather large /Length value, regardless of the actual data length inside the stream. Thi...

6.8CVSS5.8AI score0.00179EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/03/10 9:36 p.m.•4 views

CVE-2026-31826 pypdf: manipulated stream length values can exhaust RAM

pypdf is a free and open-source pure-python PDF library. Prior to 6.8.0, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing a content stream with a rather large /Length value, regardless of the actual data length inside the stream. Thi...

6.8CVSS5.8AI score0.00179EPSS
SaveExploits0References3
CVE
CVE
•added 2026/03/10 9:36 p.m.•49 views

CVE-2026-31826

The CVE-2026-31826 vulnerability affects the pypdf library prior to 6.8.0. When parsing a content stream with a very large /Length value (independent of the data length), an attacker can trigger excessive memory usage, impacting availability. The issue is resolved in version 6.8.0. Exploit detail...

6.8CVSS5.8AI score0.00179EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2026/03/10 9:36 p.m.•39 views

CVE-2026-31826 pypdf: manipulated stream length values can exhaust RAM

pypdf is a free and open-source pure-python PDF library. Prior to 6.8.0, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing a content stream with a rather large /Length value, regardless of the actual data length inside the stream. Thi...

6.8CVSS0.00179EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2026/03/10 9:36 p.m.•15 views

CVE-2026-31826

pypdf is a free and open-source pure-python PDF library. Prior to 6.8.0, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing a content stream with a rather large /Length value, regardless of the actual data length inside the stream. Thi...

6.8CVSS5.4AI score0.00179EPSS
SaveExploits0
OSV
OSV
•added 2026/03/10 9:36 p.m.•11 views

CVE-2026-31826 pypdf: manipulated stream length values can exhaust RAM

pypdf is a free and open-source pure-python PDF library. Prior to 6.8.0, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing a content stream with a rather large /Length value, regardless of the actual data length inside the stream. Thi...

6.8CVSS5.7AI score
SaveExploits0References5
attackerkb
attackerkb
•added 2026/03/10 9:36 p.m.•8 views

CVE-2026-31826

pypdf is a free and open-source pure-python PDF library. Prior to 6.8.0, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing a content stream with a rather large /Length value, regardless of the actual data length inside the stream. Thi...

6.8CVSS5.8AI score0.00179EPSS
SaveExploits0References4Affected Software1
SUSE CVE
SUSE CVE
•added 2026/03/10 12:24 a.m.•13 views

SUSE CVE-2026-28804

pypdf is a free and open-source pure-python PDF library. Prior to version 6.7.5, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires accessing a stream which uses the /ASCIIHexDecode filter. This issue has been patched in version 6.7.5...

6.5CVSS5.7AI score0.00515EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/03/10 12:00 a.m.•20 views

pypdf 安全漏洞

pypdf is an open-source, free Python library developed by py-pdf. It allows for splitting, merging, cropping, and converting pages within PDF files. Prior to version 6.8.0, pypdf had a security vulnerability. This vulnerability stemmed from improper memory usage when parsing PDF content streams...

6.8CVSS5.8AI score0.00179EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/03/10 12:00 a.m.•8 views

PT-2026-24480

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.8.0 Description pypdf is a free and open-source pure-python PDF library. A crafted PDF file can cause excessive memory usage when parsed, specifically when processing a content stream with a large /Length value,...

6.8CVSS5.8AI score0.00179EPSS
SaveExploits0References29
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/10 12:00 a.m.•0 views

CVE-2026-31826: Allocation of Resources Without Limits or Throttling

pypdf is a free and open-source pure-python PDF library. Prior to 6.8.0, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing a content stream with a rather large /Length value, regardless of the actual data length inside the stream. Thi...

6.8CVSS5.9AI score0.00179EPSS
SaveExploits0References1
Veracode
Veracode
•added 2026/03/07 5:12 a.m.•14 views

Inefficient Decoding

pypdf is vulnerable to inefficient decoding of ASCIIHexDecode streams. The vulnerability is due to an attacker being able to craft a PDF which leads to long runtimes, where accessing a stream uses the /ASCIIHexDecode filter and can be exploited by attackers to cause a denial of service...

6.9CVSS5.2AI score0.00515EPSS
SaveExploits0References4Affected Software1
Tenable Nessus
Tenable Nessus
•added 2026/03/07 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2026-28804

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pypdf is a free and open-source pure-python PDF library. Prior to version 6.7.5, an attacker who uses this vulnerability can craft a PDF which leads to long...

6.9CVSS5.8AI score0.00515EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/03/06 9:21 a.m.•19 views

CVE-2026-28804

A flaw was found in pypdf, a pure-python PDF library. A remote attacker can exploit this vulnerability by crafting a malicious PDF file that utilizes the /ASCIIHexDecode filter. Processing this specially crafted PDF can lead to excessively long runtimes, resulting in a Denial of Service DoS for t...

6.9CVSS5.8AI score0.00515EPSS
SaveExploits0References7
OSV
OSV
•added 2026/03/06 7:16 a.m.•7 views

DEBIAN-CVE-2026-28804

pypdf is a free and open-source pure-python PDF library. Prior to version 6.7.5, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires accessing a stream which uses the /ASCIIHexDecode filter. This issue has been patched in version 6.7.5...

5.3CVSS5.3AI score0.00515EPSS
SaveExploits0References1
OSV
OSV
•added 2026/03/06 7:16 a.m.•20 views

UBUNTU-CVE-2026-28804

pypdf is a free and open-source pure-python PDF library. Prior to version 6.7.5, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires accessing a stream which uses the /ASCIIHexDecode filter. This issue has been patched in version 6.7.5...

6.9CVSS5.7AI score0.00515EPSS
SaveExploits0References6
CVE
CVE
•added 2026/03/06 6:46 a.m.•71 views

CVE-2026-28804

CVE-2026-28804 affects pypdf prior to 6.7.5. A crafted PDF that uses the /ASCIIHexDecode filter can cause long runtimes (DoS) when decoding streams. This vulnerability is resolved by upgrading to pypdf 6.7.5 or later, as noted in multiple sources (NVD/NIST entry, IBM Watson Discovery Cartridge ad...

6.9CVSS5.8AI score0.00515EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2026/03/06 6:46 a.m.•49 views

CVE-2026-28804 pypdf: Inefficient decoding of ASCIIHexDecode streams

pypdf is a free and open-source pure-python PDF library. Prior to version 6.7.5, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires accessing a stream which uses the /ASCIIHexDecode filter. This issue has been patched in version 6.7.5...

6.9CVSS0.00515EPSS
SaveExploits0References4
Rows per page
Query Builder