181 matches found
Excessive Iteration
Overview pypdf is an A pure-python PDF library capable of splitting, merging, cropping, and transforming PDF files Affected versions of this package are vulnerable to Excessive Iteration via readstandardxreftable in pypdf/reader.py, where a PDF file containing a cross-reference xref table with a...
Excessive Iteration
Overview next is a react framework. Affected versions of this package are vulnerable to Excessive Iteration via a crafted request using App Router with at least one Server Action which can lead to excessive CPU usage blocking processing of further requests in the same process. Remediation Upgrade...
Linux Distros Unpatched Vulnerability : CVE-2026-110596
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - quirc through 1.2 contains an excessive-iteration vulnerability in findalignmentpattern in lib/identify.c that allows attackers to hang quircend with a crafted...
UBUNTU-CVE-2026-110596
quirc through 1.2 contains an excessive-iteration vulnerability in findalignmentpattern in lib/identify.c that allows attackers to hang quircend with a crafted image. Attackers can arrange three finder patterns producing a near-degenerate perspective transform, causing billions of regioncode...
DEBIAN-CVE-2026-110596
quirc through 1.2 contains an excessive-iteration vulnerability in findalignmentpattern in lib/identify.c that allows attackers to hang quircend with a crafted image. Attackers can arrange three finder patterns producing a near-degenerate perspective transform, causing billions of regioncode...
CVE-2026-110596
quirc through 1.2 contains an excessive-iteration vulnerability in findalignmentpattern in lib/identify.c that allows attackers to hang quircend with a crafted image. Attackers can arrange three finder patterns producing a near-degenerate perspective transform, causing billions of regioncode...
CVE-2026-110596
quirc through 1.2 contains an excessive-iteration vulnerability in findalignmentpattern in lib/identify.c that allows attackers to hang quircend with a crafted image. Attackers can arrange three finder patterns producing a near-degenerate perspective transform, causing billions of regioncode...
CVE-2026-110596 quirc through 1.2 Denial of Service via find_alignment_pattern Spiral Search
quirc through 1.2 contains an excessive-iteration vulnerability in findalignmentpattern in lib/identify.c that allows attackers to hang quircend with a crafted image. Attackers can arrange three finder patterns producing a near-degenerate perspective transform, causing billions of regioncode...
CVE-2026-110596
quirc versions through 1.2 are vulnerable to a Denial of Service (DoS) via an excessive-iteration flaw in the find_alignment_pattern() function located in lib/identify.c. An attacker can provide a crafted image with three arranged finder patterns that produce a near-degenerate perspective transfo...
CVE-2026-110596 quirc through 1.2 Denial of Service via find_alignment_pattern Spiral Search
quirc through 1.2 contains an excessive-iteration vulnerability in findalignmentpattern in lib/identify.c that allows attackers to hang quircend with a crafted image. Attackers can arrange three finder patterns producing a near-degenerate perspective transform, causing billions of regioncode...
EUVD-2026-101224
quirc through 1.2 contains an excessive-iteration vulnerability in findalignmentpattern in lib/identify.c that allows attackers to hang quircend with a crafted image. Attackers can arrange three finder patterns producing a near-degenerate perspective transform, causing billions of regioncode...
CVE-2026-110596 quirc through 1.2 Denial of Service via find_alignment_pattern Spiral Search
quirc through 1.2 contains an excessive-iteration vulnerability in findalignmentpattern in lib/identify.c that allows attackers to hang quircend with a crafted image. Attackers can arrange three finder patterns producing a near-degenerate perspective transform, causing billions of regioncode...
CVE-2026-110596
quirc through 1.2 contains an excessive-iteration vulnerability in findalignmentpattern in lib/identify.c that allows attackers to hang quircend with a crafted image. Attackers can arrange three finder patterns producing a near-degenerate perspective transform, causing billions of regioncode...
CVE-2026-110596
quirc through 1.2 contains an excessive-iteration vulnerability in findalignmentpattern in lib/identify.c that allows attackers to hang quircend with a crafted image. Attackers can arrange three finder patterns producing a near-degenerate perspective transform, causing billions of regioncode...
CVE-2026-110596: Excessive Iteration
quirc through 1.2 contains an excessive-iteration vulnerability in findalignmentpattern in lib/identify.c that allows attackers to hang quircend with a crafted image. Attackers can arrange three finder patterns producing a near-degenerate perspective transform, causing billions of regioncode...
PT-2026-114038
Name of the Vulnerable Software and Affected Versions quirc versions prior to 1.3 Description An excessive-iteration issue exists in the find alignment pattern function within lib/identify.c. An attacker can provide a specially crafted QR image with three finder patterns that create a...
BIT-THRIFT-2026-91137 Apache Thrift: PHP `thrift_protocol` accelerator: zero-byte container elements
Improper validation of specified quantity in input, Allocation of resources without limits or throttling, Excessive Iteration vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...
PT-2026-109198
Improper validation of specified quantity in input, Allocation of resources without limits or throttling, Excessive Iteration vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...
Linux Distros Unpatched Vulnerability : CVE-2026-91137
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper validation of specified quantity in input, Allocation of resources without limits or throttling, Excessive Iteration vulnerability in Apache Thrift PHP...
SUSE CVE-2026-91137
Improper validation of specified quantity in input, Allocation of resources without limits or throttling, Excessive Iteration vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...