Lucene search
K

48 matches found

SUSE CVE
SUSE CVE
added 2 days ago1 views

SUSE CVE-2023-26930

Buffer Overflow vulnerability found in XPDF v.4.04 allows an attacker to cause a Denial of Service via the PDFDoc malloc in the pdftotext.cc function. NOTE: Vendor states “it's an expected abort on out-of-memory error.”...

5.5CVSS6.5AI score0.00145EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 4 days ago5 views

CVE-2026-48155

A flaw was found in pypdf, a free and open-source pure-python PDF library. An attacker can craft a malicious PDF file that, when processed, leads to excessive memory consumption. This occurs when extracting text in layout mode with large character offsets. This vulnerability can result in a Denia...

5.5CVSS5.6AI score0.00012EPSS
Exploits0References6
SUSE CVE
SUSE CVE
added 2026/05/30 1:59 a.m.11 views

SUSE CVE-2026-48155

pypdf is a free and open-source pure-python PDF library. Prior to 6.12.0, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires extracting text in layout mode with large character offsets. This vulnerability is fixed in 6.12.0...

5.5CVSS5.8AI score0.00012EPSS
Exploits0References3
OSV
OSV
added 2026/05/28 4:16 p.m.5 views

UBUNTU-CVE-2026-48155

pypdf is a free and open-source pure-python PDF library. Prior to 6.12.0, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires extracting text in layout mode with large character offsets. This vulnerability is fixed in 6.12.0...

5.5CVSS5.8AI score0.00012EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/05/28 2:51 p.m.25 views

CVE-2026-48155 pypdf: Possible large memory usage for large offsets for layout mode text

pypdf is a free and open-source pure-python PDF library. Prior to 6.12.0, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires extracting text in layout mode with large character offsets. This vulnerability is fixed in 6.12.0...

4.8CVSS0.00012EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/05/28 2:51 p.m.4 views

CVE-2026-48155

pypdf is a free and open-source pure-python PDF library. Prior to 6.12.0, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires extracting text in layout mode with large character offsets. This vulnerability is fixed in 6.12.0...

4.8CVSS5.8AI score0.00012EPSS
Exploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2026/05/28 12:0 a.m.5 views

PT-2026-44392

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.12.0 Description A flaw in the pure-python PDF library allows an attacker to craft a PDF file that causes excessive memory consumption. This occurs when extracting text in layout mode using large character offsets...

5.5CVSS5.8AI score0.00012EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/05/28 12:0 a.m.6 views

pypdf 资源管理错误漏洞

pypdf is an open-source, free Python library developed by py-pdf. It allows for splitting, merging, cropping, and converting pages within PDF files. Prior to version 6.12.0, pypdf had a resource management vulnerability caused by the use of large character offsets when extracting text in layout...

5.5CVSS5.8AI score0.00012EPSS
Exploits0References3
NVD
NVD
added 2026/03/29 6:16 p.m.2 views

CVE-2026-0558

A vulnerability in parisneo/lollms, up to and including version 2.2.0, allows unauthenticated users to upload and process files through the /api/files/extract-text endpoint. This endpoint does not enforce authentication, unlike other file-related endpoints, and lacks the Dependsgetcurrentactiveus...

9.8CVSS0.00477EPSS
Exploits1References2
Veracode
Veracode
added 2026/02/28 5:14 a.m.4 views

Denial Of Service

pypdf is vulnerable to Denial of Service. The vulnerability is due to an attacker crafting a PDF with unusually large values in the /ToUnicode entry of a font, where parsing this entry leads to long runtimes and large memory consumption, and how attackers can exploit it by using this vulnerabilit...

6.9CVSS5.3AI score0.00006EPSS
Exploits0References4Affected Software1
SUSE CVE
SUSE CVE
added 2026/02/24 12:24 a.m.0 views

SUSE CVE-2026-27025

pypdf is a free and open-source pure-python PDF library. Prior to 6.7.1, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consumption. This requires parsing the /ToUnicode entry of a font with unusually large values, for example during text...

5.5CVSS5.7AI score0.00006EPSS
Exploits0References3
NVD
NVD
added 2026/02/20 10:16 p.m.4 views

CVE-2026-27025

pypdf is a free and open-source pure-python PDF library. Prior to 6.7.1, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consumption. This requires parsing the /ToUnicode entry of a font with unusually large values, for example during text...

6.9CVSS0.00006EPSS
Exploits0References4
OSV
OSV
added 2026/02/20 10:16 p.m.4 views

DEBIAN-CVE-2026-27025

pypdf is a free and open-source pure-python PDF library. Prior to 6.7.1, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consumption. This requires parsing the /ToUnicode entry of a font with unusually large values, for example during text...

5.5CVSS5.4AI score0.00006EPSS
Exploits0References1
OSV
OSV
added 2026/02/20 9:11 p.m.6 views

CVE-2026-27025 pypdf has possible long runtimes/large memory usage for large /ToUnicode streams

pypdf is a free and open-source pure-python PDF library. Prior to 6.7.1, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consumption. This requires parsing the /ToUnicode entry of a font with unusually large values, for example during text...

6.9CVSS5.5AI score0.00006EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2026/02/19 12:0 a.m.3 views

PT-2026-20908

pypdf is a free and open-source pure-python PDF library. Prior to 6.7.1, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consumption. This requires parsing the /ToUnicode entry of a font with unusually large values, for example during text...

6.9CVSS5.6AI score0.00006EPSS
Exploits0References5
Fedora
Fedora
added 2026/01/11 12:55 a.m.8 views

[SECURITY] Fedora 42 Update: python-pdfminer-20240706-5.fc42

Pdfminer.six is a community maintained fork of the original PDFMiner. It is a tool for extracting information from PDF documents. It focuses on getting and analyzing text data. Pdfminer.six extracts the text from a page directly from the sourcecode of the PDF. It can also be used to get the exact...

8.6CVSS6.7AI score0.00119EPSS
Exploits1
Fedora
Fedora
added 2026/01/08 1:28 a.m.4 views

[SECURITY] Fedora 43 Update: python-pdfminer-20251230-1.fc43

Pdfminer.six is a community maintained fork of the original PDFMiner. It is a tool for extracting information from PDF documents. It focuses on getting and analyzing text data. Pdfminer.six extracts the text from a page directly from the sourcecode of the PDF. It can also be used to get the exact...

8.6CVSS6.4AI score0.00119EPSS
Exploits1
Fedora
Fedora
added 2025/11/17 3:36 a.m.6 views

[SECURITY] Fedora 41 Update: python-pdfminer-20240706-3.fc41

Pdfminer.six is a community maintained fork of the original PDFMiner. It is a tool for extracting information from PDF documents. It focuses on getting and analyzing text data. Pdfminer.six extracts the text from a page directly from the sourcecode of the PDF. It can also be used to get the exact...

8.6CVSS6.4AI score0.00119EPSS
Exploits1
Fedora
Fedora
added 2025/11/17 2:59 a.m.12 views

[SECURITY] Fedora 42 Update: python-pdfminer-20240706-4.fc42

Pdfminer.six is a community maintained fork of the original PDFMiner. It is a tool for extracting information from PDF documents. It focuses on getting and analyzing text data. Pdfminer.six extracts the text from a page directly from the sourcecode of the PDF. It can also be used to get the exact...

8.6CVSS6.4AI score0.00119EPSS
Exploits1
Fedora
Fedora
added 2025/11/17 2:47 a.m.7 views

[SECURITY] Fedora 43 Update: python-pdfminer-20251107-1.fc43

Pdfminer.six is a community maintained fork of the original PDFMiner. It is a tool for extracting information from PDF documents. It focuses on getting and analyzing text data. Pdfminer.six extracts the text from a page directly from the sourcecode of the PDF. It can also be used to get the exact...

8.6CVSS6.4AI score0.00119EPSS
Exploits1
Rows per page
Query Builder