Lucene search
+L

6 matches found

PyPA
PyPA
added 2026/09/10 9:44 a.m.10 views

pypdf: Possible long runtimes/large memory usage when extracting XForm objects

ImpactAn attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consumption. This requires extracting the text of a page with lots of XForm objects, where some of them might be re-used. PatchesThis has been fixed in pypdf==6.16.1. WorkaroundsIf you cann...

4.8CVSS5.4AI score0.00138EPSS
SaveExploits0References8Affected Software1
OSV
OSV
added 2026/09/10 9:44 a.m.11 views

PYSEC-2026-3911 pypdf: Possible long runtimes/large memory usage when extracting XForm objects

Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consumption. This requires extracting the text of a page with lots of XForm objects, where some of them might be re-used. Patches This has been fixed in pypdf==6.16.1. Workarounds If you...

4.8CVSS5.4AI score0.00138EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
added 2026/09/01 9:27 p.m.24 views

pypdf: Possible long runtimes/large memory usage when extracting XForm objects

Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consumption. This requires extracting the text of a page with lots of XForm objects, where some of them might be re-used. Patches This has been fixed in pypdf==6.16.1. Workarounds If you...

4.8CVSS5.8AI score0.00138EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2026/09/01 9:27 p.m.10 views

GHSA-763M-79HH-57F2 pypdf: Possible long runtimes/large memory usage when extracting XForm objects

Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consumption. This requires extracting the text of a page with lots of XForm objects, where some of them might be re-used. Patches This has been fixed in pypdf==6.16.1. Workarounds If you...

4.8CVSS5.8AI score0.00138EPSS
SaveExploits0References5
Snyk
Snyk
added 2026/09/01 9:27 p.m.10 views

Excessive Iteration

Overview pypdf is an A pure-python PDF library capable of splitting, merging, cropping, and transforming PDF files Affected versions of this package are vulnerable to Excessive Iteration in its text extraction of pages that contain XForm objects, which processes those objects without limiting the...

4.8CVSS5.4AI score0.00138EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/09/01 8:57 p.m.12 views

CVE-2026-84311

A flaw was found in pypdf, a pure-python PDF library. A remote attacker can exploit this vulnerability by crafting a malicious PDF document containing specially structured XForm objects. Processing this document can lead to excessive iteration, causing the application to consume significant memor...

5.5CVSS5.7AI score0.00138EPSS
SaveExploits0References7
Rows per page
Query Builder