Lucene search
+L

39 matches found

PyPA
PyPA
•added 2026/07/13 3:46 p.m.•35 views

pypdf: Possible infinite loop when retrieving fonts for layout-mode text extraction

ImpactAn attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires extracting the text in layout mode. PatchesThis has been fixed in pypdf==6.13.0. WorkaroundsIf you cannot upgrade yet, consider applying the changes from PR 3830...

6.9CVSS5.8AI score0.00174EPSS
SaveExploits0References7Affected Software1
osv_pysec
osv_pysec
•added 2026/07/13 3:46 p.m.•26 views

PYSEC-2026-3009 pypdf: Possible infinite loop when retrieving fonts for layout-mode text extraction

Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires extracting the text in layout mode. Patches This has been fixed in pypdf==6.13.0. Workarounds If you cannot upgrade yet, consider applying the changes from PR 3830...

6.9CVSS5.8AI score0.00174EPSS
SaveExploits0References7
PyPA
PyPA
•added 2026/07/13 3:46 p.m.•33 views

pypdf: Possible large memory usage for large offsets for layout mode text

ImpactAn attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires extracting text in layout mode with large character offsets. PatchesThis has been fixed in pypdf==6.12.0. WorkaroundsIf developers are unable to immediately upgrade, they should consider...

5.5CVSS6.1AI score0.00127EPSS
SaveExploits0References7Affected Software1
osv_pysec
osv_pysec
•added 2026/07/13 3:46 p.m.•25 views

PYSEC-2026-3016 pypdf: Possible large memory usage for large offsets for layout mode text

Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires extracting text in layout mode with large character offsets. Patches This has been fixed in pypdf==6.12.0. Workarounds If developers are unable to immediately upgrade, they should...

4.8CVSS6.1AI score0.00127EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/07/13 12:00 a.m.•30 views

PT-2026-59631

Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires extracting the text in layout mode. Patches This has been fixed in pypdf==6.13.0. Workarounds If you cannot upgrade yet, consider applying the changes from PR 3830...

6.9CVSS5.8AI score0.00174EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/07/13 12:00 a.m.•43 views

PT-2026-59638

Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires extracting text in layout mode with large character offsets. Patches This has been fixed in pypdf==6.12.0. Workarounds If developers are unable to immediately upgrade, they should...

5.5CVSS6.1AI score0.00127EPSS
SaveExploits0References8
RedhatCVE
RedhatCVE
•added 2026/06/24 8:39 p.m.•26 views

CVE-2026-54530

A flaw was found in pypdf, a pure-python PDF library. An attacker can craft a malicious PDF file that, when processed by a system extracting text in layout mode, can lead to an infinite loop. This vulnerability results in a Denial of Service DoS, making the affected system unresponsive. Mitigatio...

6.9CVSS5.7AI score0.00174EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2026/06/23 12:00 a.m.•27 views

Linux Distros Unpatched Vulnerability : CVE-2026-54530

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pypdf is a free and open-source pure-python PDF library. Prior to 6.13.0, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loo...

6.9CVSS5.9AI score0.00174EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2026/06/22 9:16 p.m.•31 views

DEBIAN-CVE-2026-54530

pypdf is a free and open-source pure-python PDF library. Prior to 6.13.0, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires extracting the text in layout mode. This vulnerability is fixed in 6.13.0...

5.5CVSS5.9AI score0.00174EPSS
SaveExploits0References1
NVD
NVD
•added 2026/06/22 9:16 p.m.•36 views

CVE-2026-54530

pypdf is a free and open-source pure-python PDF library. Prior to 6.13.0, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires extracting the text in layout mode. This vulnerability is fixed in 6.13.0...

6.9CVSS0.00174EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2026/06/22 9:16 p.m.•26 views

UBUNTU-CVE-2026-54530

pypdf is a free and open-source pure-python PDF library. Prior to 6.13.0, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires extracting the text in layout mode. This vulnerability is fixed in 6.13.0...

6.9CVSS5.9AI score0.00174EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2026/06/22 9:16 p.m.•21 views

CVE-2026-54530

pypdf is a free and open-source pure-python PDF library. Prior to 6.13.0, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires extracting the text in layout mode. This vulnerability is fixed in 6.13.0...

6.9CVSS6AI score0.00174EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/06/22 8:25 p.m.•14 views

CVE-2026-54530 pypdf: Possible infinite loop when retrieving fonts for layout-mode text extraction

pypdf is a free and open-source pure-python PDF library. Prior to 6.13.0, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires extracting the text in layout mode. This vulnerability is fixed in 6.13.0...

6.9CVSS5.9AI score0.00174EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/06/22 8:25 p.m.•52 views

CVE-2026-54530 pypdf: Possible infinite loop when retrieving fonts for layout-mode text extraction

pypdf is a free and open-source pure-python PDF library. Prior to 6.13.0, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires extracting the text in layout mode. This vulnerability is fixed in 6.13.0...

6.9CVSS0.00174EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/06/22 8:25 p.m.•15 views

CVE-2026-54530

pypdf is a free and open-source pure-python PDF library. Prior to 6.13.0, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires extracting the text in layout mode. This vulnerability is fixed in 6.13.0...

6.9CVSS6AI score0.00174EPSS
SaveExploits0References4Affected Software1
Mend
Mend
•added 2026/06/22 8:25 p.m.•33 views

CVE-2026-54530

pypdf is a free and open-source pure-python PDF library. Prior to 6.13.0, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires extracting the text in layout mode. This vulnerability is fixed in 6.13.0...

6.9CVSS6AI score0.00174EPSS
SaveExploits0References8
CVE
CVE
•added 2026/06/22 8:25 p.m.•132 views

CVE-2026-54530

CVE-2026-54530 – pypdf : A flaw in the pure-Python PDF library allows an attacker to craft a PDF that triggers an infinite loop when performing text extraction in layout mode. Affected versions are prior to 6.13.0. Impact noted as higher for availability. Remediation: upgrade to 6.13.0 (or apply ...

6.9CVSS5.9AI score0.00174EPSS
SaveExploits0References3Affected Software1
osv_cve
osv_cve
•added 2026/06/22 8:25 p.m.•29 views

CVE-2026-54530 pypdf: Possible infinite loop when retrieving fonts for layout-mode text extraction

pypdf is a free and open-source pure-python PDF library. Prior to 6.13.0, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires extracting the text in layout mode. This vulnerability is fixed in 6.13.0...

6.9CVSS5.9AI score
SaveExploits0References5
EUVD
EUVD
•added 2026/06/22 8:25 p.m.•31 views

EUVD-2026-38354

pypdf is a free and open-source pure-python PDF library. Prior to 6.13.0, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires extracting the text in layout mode. This vulnerability is fixed in 6.13.0...

6.9CVSS6AI score0.00174EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2026/06/22 8:25 p.m.•33 views

CVE-2026-54530

pypdf is a free and open-source pure-python PDF library. Prior to 6.13.0, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires extracting the text in layout mode. This vulnerability is fixed in 6.13.0...

6.9CVSS5.9AI score0.00174EPSS
SaveExploits0
Rows per page
Query Builder