EUVD-2026-10925

pypdf: manipulated stream length values can exhaust RAM...

The vulnerability of the PHP library TCPDF, related to improper handling of input data during web page generation, allows attackers to execute arbitrary code.

The vulnerability of the PHP library TCPDF is related to insufficient cleaning of data provided by the user when displaying error messages. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...