Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
•added 2026/10/21 7:58 p.m.•3 views

pypdf: Unvalidated JPEG image data loading

Impact An attacker who uses this vulnerability can craft a PDF which leads to arbitrary image parsers being called. This requires loading an image which claims to use the /DCTDecode filter JPEG data. Users which do not have the optional Pillow dependency installed in their environment are not...

2.3CVSS5.9AI score
SaveExploits0References6Affected Software1
osv_ghsa
osv_ghsa
•added 2026/10/21 7:58 p.m.•2 views

GHSA-5HX5-VPF9-5WCV pypdf: Unvalidated JPEG image data loading

Impact An attacker who uses this vulnerability can craft a PDF which leads to arbitrary image parsers being called. This requires loading an image which claims to use the /DCTDecode filter JPEG data. Users which do not have the optional Pillow dependency installed in their environment are not...

2.3CVSS5.9AI score
SaveExploits0References6
Rows per page
Query Builder