13 matches found
pypdf's LZWDecode streams be manipulated to exhaust RAM
ImpactAn attacker who uses this vulnerability can craft a PDF which leads to a memory usage of up to 1 GB per stream. This requires parsing the content stream of a page using the LZWDecode filter.This is a follow up to GHSA-jfx9-29x2-rv3j to align the default limit with the one for zlib...
8.7CVSS5.8AI score0.00361EPSS
SaveExploits0References9Affected Software1
20