2 matches found
pypdf: Unvalidated JPEG image data loading
Impact An attacker who uses this vulnerability can craft a PDF which leads to arbitrary image parsers being called. This requires loading an image which claims to use the /DCTDecode filter JPEG data. Users which do not have the optional Pillow dependency installed in their environment are not...
2.3CVSS5.9AI score
SaveExploits0References6Affected Software1
GHSA-5HX5-VPF9-5WCV pypdf: Unvalidated JPEG image data loading
Impact An attacker who uses this vulnerability can craft a PDF which leads to arbitrary image parsers being called. This requires loading an image which claims to use the /DCTDecode filter JPEG data. Users which do not have the optional Pillow dependency installed in their environment are not...
2.3CVSS5.9AI score
SaveExploits0References6
20