Lucene search
+L

698 matches found

Snyk
Snyk
added 2026/02/25 6:17 a.m.5 views

Infinite loop

Overview pypdf is an A pure-python PDF library capable of splitting, merging, cropping, and transforming PDF files Affected versions of this package are vulnerable to Infinite loop in reader.py, when loading circular /Prev entries in cross-reference streams. An attacker can cause the application ...

7.5CVSS5.9AI score0.00346EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/02/25 2:45 a.m.23 views

CVE-2026-27628 pypdf has a possible infinite loop when loading circular /Prev entries in cross-reference streams

pypdf is a free and open-source pure-python PDF library. Prior to 6.7.2, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires reading the file. This has been fixed in pypdf 6.7.2. As a workaround, one may apply the patch manually...

5.1CVSS0.00346EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/02/25 2:45 a.m.1 views

CVE-2026-27628 pypdf has a possible infinite loop when loading circular /Prev entries in cross-reference streams

pypdf is a free and open-source pure-python PDF library. Prior to 6.7.2, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires reading the file. This has been fixed in pypdf 6.7.2. As a workaround, one may apply the patch manually...

5.1CVSS5.2AI score0.00346EPSS
SaveExploits0References3
CVE
CVE
added 2026/02/25 2:45 a.m.31 views

CVE-2026-27628

CVE-2026-27628 affects the Python library pypdf. Before version 6.7.2, crafted PDFs could trigger an infinite loop when loading circular /Prev entries in cross-reference streams (requires reading the file). The issue has been fixed in pypdf 6.7.2; a patch can be manually applied as a workaround. ...

7.5CVSS5.3AI score0.00346EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2026/02/25 2:45 a.m.3 views

CVE-2026-27628 pypdf has a possible infinite loop when loading circular /Prev entries in cross-reference streams

pypdf is a free and open-source pure-python PDF library. Prior to 6.7.2, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires reading the file. This has been fixed in pypdf 6.7.2. As a workaround, one may apply the patch manually...

5.1CVSS5.5AI score0.00346EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2026/02/25 12:24 a.m.8 views

SUSE CVE-2026-25971

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, Magick fails to check for circular references between two MSLs, leading to a stack overflow. Versions 7.1.2-15 and 6.9.13-40 contain a patch...

6.2CVSS5.9AI score0.00208EPSS
SaveExploits0References7
OSV
OSV
added 2026/02/24 4:40 p.m.6 views

CLSA-2026-1771951235 ImageMagick: Fix of CVE-2025-68950

CVE-2025-68950: fix DOS due to circular references between two MVGs, leading to a stack overflow...

6.2CVSS5.9AI score0.00164EPSS
SaveExploits0References1
OSV
OSV
added 2026/02/24 11:12 a.m.7 views

CLSA-2026-1771868375 ImageMagick: Fix of CVE-2025-68950

CVE-2025-68950: fix DOS due to circular references between two MVGs, leading to a stack overflow...

6.2CVSS5.9AI score0.00164EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/02/24 5:32 a.m.8 views

CVE-2026-25971

A flaw was found in ImageMagick, a free and open-source software for editing and manipulating digital images. This vulnerability occurs because ImageMagick fails to check for circular references between two Magick Scripting Language MSL files. A remote attacker could exploit this by providing...

9.8CVSS5.7AI score0.00208EPSS
SaveExploits0References4
NVD
NVD
added 2026/02/24 2:16 a.m.14 views

CVE-2026-25971

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, Magick fails to check for circular references between two MSLs, leading to a stack overflow. Versions 7.1.2-15 and 6.9.13-40 contain a patch...

9.8CVSS0.00208EPSS
SaveExploits0References1
OSV
OSV
added 2026/02/24 2:16 a.m.2 views

DEBIAN-CVE-2026-25971

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, Magick fails to check for circular references between two MSLs, leading to a stack overflow. Versions 7.1.2-15 and 6.9.13-40 contain a patch...

9.8CVSS7.8AI score0.00208EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2026/02/24 1:39 a.m.2 views

CVE-2026-25971

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, Magick fails to check for circular references between two MSLs, leading to a stack overflow. Versions 7.1.2-15 and 6.9.13-40 contain a patch...

9.8CVSS7.8AI score0.00208EPSS
SaveExploits0
CVE
CVE
added 2026/02/24 1:39 a.m.70 views

CVE-2026-25971

CVE-2026-25971 : ImageMagick’s Magick Scripting Language (MSL) parsing fails to guard against circular references between two MSLs, causing a stack overflow. Affected versions are pre-7.1.2-15 and pre-6.9.13-40; these versions include a patch. Debian/SUSE advisories list this CVE among many image...

9.8CVSS5.4AI score0.00208EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/02/24 1:39 a.m.27 views

CVE-2026-25971 ImageMagick's MSL: Stack overflow in ProcessMSLScript

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, Magick fails to check for circular references between two MSLs, leading to a stack overflow. Versions 7.1.2-15 and 6.9.13-40 contain a patch...

6.2CVSS0.00208EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
added 2026/02/24 1:39 a.m.4 views

CVE-2026-25971

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, Magick fails to check for circular references between two MSLs, leading to a stack overflow. Versions 7.1.2-15 and 6.9.13-40 contain a patch...

9.8CVSS5.6AI score0.00208EPSS
SaveExploits0
OSV
OSV
added 2026/02/24 1:39 a.m.5 views

CVE-2026-25971 ImageMagick's MSL: Stack overflow in ProcessMSLScript

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, Magick fails to check for circular references between two MSLs, leading to a stack overflow. Versions 7.1.2-15 and 6.9.13-40 contain a patch...

6.2CVSS6AI score0.00208EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/02/24 12:0 a.m.9 views

ImageMagick 安全漏洞

ImageMagick is a set of open-source image processing software developed by the ImageMagick project. It can read, convert, and write images in various formats. Versions of ImageMagick prior to 7.1.2-15 and 6.9.13-40 contained security vulnerabilities. These vulnerabilities stemmed from insufficien...

9.8CVSS7.2AI score0.00208EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/02/24 12:0 a.m.3 views

CVE-2026-25971

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, Magick fails to check for circular references between two MSLs, leading to a stack overflow. Versions 7.1.2-15 and 6.9.13-40 contain a patch...

9.8CVSS6AI score0.00208EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/02/24 12:0 a.m.6 views

PT-2026-21631

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-15 ImageMagick versions prior to 6.9.13-40 Description ImageMagick is software used for editing and manipulating digital images. A flaw exists where the software does not properly check for circular referenc...

9.8CVSS5.8AI score0.00594EPSS
SaveExploits0References192
NVD
NVD
added 2026/02/19 9:18 p.m.6 views

CVE-2026-27114

NanaZip is an open source file archive. Starting in version 5.0.1252.0 and prior to version 6.0.1630.0, circular NextOffset chains cause an infinite loop in the ROMFS archive parser. Version 6.0.1630.0 patches the issue...

7.5CVSS0.00267EPSS
SaveExploits1References2
Rows per page
Query Builder