Lucene search
+L

12018 matches found

Veracode
Veracode
added 2026/02/28 5:11 a.m.11 views

Infinite Loop

pypdf is vulnerable to Infinite Loop. The vulnerability is due to the library's handling of circular /Prev entries in cross-reference streams, where an attacker can craft a PDF that leads to an infinite loop when read, allowing for a denial of service attack...

7.5CVSS5.9AI score0.00346EPSS
SaveExploits0References4Affected Software1
SUSE CVE
SUSE CVE
added 2026/02/27 12:25 a.m.11 views

SUSE CVE-2026-27628

pypdf is a free and open-source pure-python PDF library. Prior to 6.7.2, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires reading the file. This has been fixed in pypdf 6.7.2. As a workaround, one may apply the patch manually...

7.5CVSS5.7AI score0.00346EPSS
SaveExploits0References3
Packet Storm
Packet Storm
added 2026/02/26 12:00 a.m.159 views

📄 zlib crc32_combine_gen64 Denial of Service

zlib versions prior to 1.3.2 has an infinite loop vulnerability in the crc32combinegen64 function that can result in a denial of service condition. ============================================================================================================================================= | Title...

5.5AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/02/26 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-24485

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, when a PCD file does no...

7.5CVSS7.2AI score0.00449EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2026/02/25 4:09 p.m.11 views

pypdf has a possible infinite loop when loading circular /Prev entries in cross-reference streams

Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires reading the file. Patches This has been fixed in pypdf==6.7.2. Workarounds If users cannot upgrade yet, consider applying the changes from PR 3655...

7.5CVSS5.3AI score0.00346EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2026/02/25 4:09 p.m.11 views

GHSA-2RW7-X74F-JG35 pypdf has a possible infinite loop when loading circular /Prev entries in cross-reference streams

Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires reading the file. Patches This has been fixed in pypdf==6.7.2. Workarounds If users cannot upgrade yet, consider applying the changes from PR 3655...

5.1CVSS5.7AI score0.00346EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/02/25 4:09 p.m.10 views

EUVD-2026-8601

pypdf has a possible infinite loop when loading circular /Prev entries in cross-reference streams...

7.5CVSS5.2AI score0.00346EPSS
SaveExploits0References5
Snyk
Snyk
added 2026/02/25 6:17 a.m.10 views

Infinite loop

Overview pypdf is an A pure-python PDF library capable of splitting, merging, cropping, and transforming PDF files Affected versions of this package are vulnerable to Infinite loop in reader.py, when loading circular /Prev entries in cross-reference streams. An attacker can cause the application ...

7.5CVSS5.9AI score0.00346EPSS
SaveExploits0References2
NVD
NVD
added 2026/02/25 3:16 a.m.18 views

CVE-2026-27628

pypdf is a free and open-source pure-python PDF library. Prior to 6.7.2, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires reading the file. This has been fixed in pypdf 6.7.2. As a workaround, one may apply the patch manually...

7.5CVSS0.00346EPSS
SaveExploits0References3
OSV
OSV
added 2026/02/25 3:16 a.m.4 views

DEBIAN-CVE-2026-27628

pypdf is a free and open-source pure-python PDF library. Prior to 6.7.2, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires reading the file. This has been fixed in pypdf 6.7.2. As a workaround, one may apply the patch manually...

7.5CVSS8.1AI score0.00346EPSS
SaveExploits0References1
OSV
OSV
added 2026/02/25 3:16 a.m.10 views

UBUNTU-CVE-2026-27628

pypdf is a free and open-source pure-python PDF library. Prior to 6.7.2, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires reading the file. This has been fixed in pypdf 6.7.2. As a workaround, one may apply the patch manually...

7.5CVSS5.7AI score0.00346EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2026/02/25 3:16 a.m.10 views

CVE-2026-27628

pypdf is a free and open-source pure-python PDF library. Prior to 6.7.2, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires reading the file. This has been fixed in pypdf 6.7.2. As a workaround, one may apply the patch manually...

7.5CVSS5.7AI score0.00346EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/02/25 2:45 a.m.9 views

CVE-2026-27628

pypdf is a free and open-source pure-python PDF library. Prior to 6.7.2, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires reading the file. This has been fixed in pypdf 6.7.2. As a workaround, one may apply the patch manually...

7.5CVSS5.3AI score0.00346EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2026/02/25 2:45 a.m.6 views

CVE-2026-27628 pypdf has a possible infinite loop when loading circular /Prev entries in cross-reference streams

pypdf is a free and open-source pure-python PDF library. Prior to 6.7.2, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires reading the file. This has been fixed in pypdf 6.7.2. As a workaround, one may apply the patch manually...

5.1CVSS5.5AI score
SaveExploits0References5
Debian CVE
Debian CVE
added 2026/02/25 2:45 a.m.19 views

CVE-2026-27628

pypdf is a free and open-source pure-python PDF library. Prior to 6.7.2, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires reading the file. This has been fixed in pypdf 6.7.2. As a workaround, one may apply the patch manually...

7.5CVSS8.1AI score0.00346EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/02/25 2:45 a.m.30 views

CVE-2026-27628 pypdf has a possible infinite loop when loading circular /Prev entries in cross-reference streams

pypdf is a free and open-source pure-python PDF library. Prior to 6.7.2, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires reading the file. This has been fixed in pypdf 6.7.2. As a workaround, one may apply the patch manually...

5.1CVSS0.00346EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/02/25 2:45 a.m.3 views

CVE-2026-27628 pypdf has a possible infinite loop when loading circular /Prev entries in cross-reference streams

pypdf is a free and open-source pure-python PDF library. Prior to 6.7.2, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires reading the file. This has been fixed in pypdf 6.7.2. As a workaround, one may apply the patch manually...

5.1CVSS5.2AI score0.00346EPSS
SaveExploits0References3
CVE
CVE
added 2026/02/25 2:45 a.m.52 views

CVE-2026-27628

CVE-2026-27628 affects the Python library pypdf. Before version 6.7.2, crafted PDFs could trigger an infinite loop when loading circular /Prev entries in cross-reference streams (requires reading the file). The issue has been fixed in pypdf 6.7.2; a patch can be manually applied as a workaround. ...

7.5CVSS5.3AI score0.00346EPSS
SaveExploits0References3Affected Software1
SUSE CVE
SUSE CVE
added 2026/02/25 12:25 a.m.13 views

SUSE CVE-2026-24485

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, when a PCD file does not contain a valid Sync marker, the DecodeImage function becomes trapped in an infinite loop while searching for the Sync marker, causing...

5.5CVSS5.8AI score0.00449EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
added 2026/02/25 12:24 a.m.8 views

SUSE CVE-2026-26066

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a crafted profile contain invalid IPTC data may cause an infinite loop when writing it with IPTCTEXT. Versions 7.1.2-15 and 6.9.13-40 contain a patch...

6.2CVSS5.8AI score0.00327EPSS
SaveExploits0References7
Rows per page
Query Builder