Lucene search
+L

15099 matches found

Github Security Blog
Github Security Blog
added 2026/09/01 9:20 p.m.9 views

pypdf: Possible infinite loop for TreeObject.insert_child

Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires a usually writing code path where TreeObject.insertchild is involved. Patches This has been fixed in pypdf==6.16.0. Workarounds If you cannot upgrade yet, consider applying the changes fr...

6.9CVSS5.8AI score0.00127EPSS
SaveExploits0References5Affected Software1
Snyk
Snyk
added 2026/09/01 9:20 p.m.10 views

Infinite loop

Overview pypdf is an A pure-python PDF library capable of splitting, merging, cropping, and transforming PDF files Affected versions of this package are vulnerable to Infinite loop in the insertchild method of TreeObject, whose loop can fail to reach its exit condition. An attacker can hang the...

6.9CVSS5.6AI score0.00127EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/01 8:17 p.m.9 views

CVE-2026-84309

pypdf is a free and open-source pure-python PDF library. Prior to 6.16.0, an attacker can craft a PDF whose cyclic tree structure causes pypdf/generic/datastructures.py TreeObject.insertchild to follow /Next links indefinitely when a writing code path inserts a child, producing an infinite loop...

6.9CVSS0.00127EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/01 8:17 p.m.11 views

DEBIAN-CVE-2026-84309

pypdf is a free and open-source pure-python PDF library. Prior to 6.16.0, an attacker can craft a PDF whose cyclic tree structure causes pypdf/generic/datastructures.py TreeObject.insertchild to follow /Next links indefinitely when a writing code path inserts a child, producing an infinite loop...

6.9CVSS5.9AI score0.00127EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/01 7:58 p.m.44 views

CVE-2026-84309 pypdf: Possible infinite loop for TreeObject.insert_child

pypdf is a free and open-source pure-python PDF library. Prior to 6.16.0, an attacker can craft a PDF whose cyclic tree structure causes pypdf/generic/datastructures.py TreeObject.insertchild to follow /Next links indefinitely when a writing code path inserts a child, producing an infinite loop...

6.9CVSS0.00127EPSS
SaveExploits0References4
CVE
CVE
added 2026/09/01 7:58 p.m.21 views

CVE-2026-84309

pypdf versions prior to 6.16.0 are vulnerable to an infinite loop in TreeObject.insert_child (pypdf/generic/_data_structures.py). An attacker can craft a PDF with a cyclic tree structure that causes the method to follow /Next links indefinitely when a writing code path inserts a child, resulting ...

6.9CVSS5.9AI score0.00127EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/01 7:58 p.m.6 views

CVE-2026-84309 pypdf: Possible infinite loop for TreeObject.insert_child

pypdf is a free and open-source pure-python PDF library. Prior to 6.16.0, an attacker can craft a PDF whose cyclic tree structure causes pypdf/generic/datastructures.py TreeObject.insertchild to follow /Next links indefinitely when a writing code path inserts a child, producing an infinite loop...

6.9CVSS5.9AI score
SaveExploits0References6
EUVD
EUVD
added 2026/09/01 7:58 p.m.9 views

EUVD-2026-69477

pypdf is a free and open-source pure-python PDF library. Prior to 6.16.0, an attacker can craft a PDF whose cyclic tree structure causes pypdf/generic/datastructures.py TreeObject.insertchild to follow /Next links indefinitely when a writing code path inserts a child, producing an infinite loop...

6.9CVSS5.9AI score0.00127EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2026/09/01 7:58 p.m.9 views

CVE-2026-84309

pypdf is a free and open-source pure-python PDF library. Prior to 6.16.0, an attacker can craft a PDF whose cyclic tree structure causes pypdf/generic/datastructures.py TreeObject.insertchild to follow /Next links indefinitely when a writing code path inserts a child, producing an infinite loop...

6.9CVSS5.9AI score0.00127EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2026/09/01 7:58 p.m.9 views

CVE-2026-84309 pypdf: Possible infinite loop for TreeObject.insert_child

pypdf is a free and open-source pure-python PDF library. Prior to 6.16.0, an attacker can craft a PDF whose cyclic tree structure causes pypdf/generic/datastructures.py TreeObject.insertchild to follow /Next links indefinitely when a writing code path inserts a child, producing an infinite loop...

6.9CVSS5.9AI score0.00127EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/09/01 6:41 p.m.8 views

libssh: libssh: denial of service via zero advertised channel packet size

A flaw was found in libssh. A remote authenticated peer can advertise a zero maximum packet size in SSHMSGCHANNELOPEN, causing later channel writes to loop indefinitely and consume CPU, leading to denial of service...

6.5CVSS5.9AI score0.00567EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/09/01 5:54 p.m.10 views

httpd: Apache HTTP Server: Denial of Service in mod_proxy_ftp via attacker-controlled FTP server

A flaw was found in the modproxyftp module of the Apache HTTP Server. A remote attacker, by controlling a backend File Transfer Protocol FTP server, can trigger an infinite loop. This vulnerability, categorized as a Loop with Unreachable Exit Condition, leads to a Denial of Service DoS for the...

7.3CVSS7AI score0.00583EPSS
SaveExploits0References5
OSV
OSV
added 2026/09/01 2:58 p.m.3 views

SUSE-SU-2026:3918-1 Security update for cups-filters

This update for cups-filters fixes the following issues: - CVE-2026-64611: user who controls an IEEE-1284 device ID consumed by cfIEEE1284GetMakeModel can drive cfIEEE1284NormalizeMakeModel into an infinite loop bsc1273145. - CVE-2026-64612: authenticated client that can submit an image print job...

7.5CVSS7.1AI score0.00382EPSS
SaveExploits0References5
SUSE Linux
SUSE Linux
added 2026/09/01 2:58 p.m.8 views

Security update for cups-filters

This update for cups-filters fixes the following issues: CVE-2026-64611: user who controls an IEEE-1284 device ID consumed by cfIEEE1284GetMakeModel can drive cfIEEE1284NormalizeMakeModel into an infinite loop bsc1273145. CVE-2026-64612: authenticated client that can submit an image print job can...

7.1CVSS7AI score0.00382EPSS
SaveExploits0References8
SUSE Linux
SUSE Linux
added 2026/09/01 2:58 p.m.8 views

Security update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provid

This update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-local, terraform-provider-null, terraform-provider-random, terraform-provider-tls fixes the...

7.1CVSS7.2AI score0.00475EPSS
SaveExploits1References16
RedhatCVE
RedhatCVE
added 2026/09/01 11:45 a.m.8 views

CVE-2026-59879

A flaw was found in Immutable.js, a library providing persistent immutable data structures. This vulnerability occurs when specific List operations, such as Listset or ListsetSize, are provided with an index or size value within a particular large range. An attacker could exploit this by providin...

8.7CVSS5.8AI score0.00543EPSS
SaveExploits1References8
OSV
OSV
added 2026/09/01 9:05 a.m.9 views

BIT-GITLAB-2025-10903 Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 11.10 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an authenticated user could have caused denial of service, due to an unbounded loop triggered by specially crafted input in the...

6.5CVSS5.9AI score0.00413EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/09/01 8:33 a.m.13 views

CVE-2026-40019

A flaw was found in Dovecot's ManageSieve login process. An unauthenticated attacker can exploit this vulnerability by sending a specially crafted, truncated quoted argument. This action causes the process to enter an infinite loop, consuming excessive CPU resources. Repeated exploitation can lea...

7.5CVSS5.9AI score0.00316EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/31 9:46 a.m.10 views

CVE-2026-80594

A flaw was found in the Linux kernel's ims-pcu driver. This vulnerability allows a malicious device to trigger an infinite loop by providing a specially crafted descriptor with a zero-length field during the parsing of CDC union descriptors. This can lead to a Denial of Service DoS condition,...

5.5CVSS5.9AI score0.00176EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/31 8:47 a.m.42 views

CVE-2026-81624 Undertow-core: undertow: websocketcontainer defaults for buffers and timeouts are infinite

Undertow is a flexible performant web server used in JBoss EAP and WildFly. A flaw was found in how Undertow handles WebSocket connections. Specifically, certain configuration limits like message buffer sizes and session timeouts cannot be adjusted and default to being unlimited. This allows a...

7.5CVSS0.00332EPSS
SaveExploits0References2
Rows per page
Query Builder