Lucene search
K

332 matches found

AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.7 views

Astra Linux - уязвимость в gdk-pixbuf

GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the lzw compressed stream of image data in GIF files with lzw minimum code size equals to 12...

8.8CVSS7.4AI score0.00317EPSS
Exploits1References2
Fedora
Fedora
added 2026/02/11 1:0 a.m.4 views

[SECURITY] Fedora 42 Update: rust-weezl-0.1.12-3.fc42

Fast LZW compression and decompression...

7.5CVSS5.4AI score0.0004EPSS
Exploits1
Veracode
Veracode
added 2025/12/13 7:35 a.m.4 views

Uncontrolled Memory Allocation

pypdf is vulnerable to uncontrolled memory allocation. The vulnerability is due to improper handling of LZWDecode streams, which allows an attacker to craft a malicious PDF that causes excessive memory consumption up to 1 GB per stream during content parsing...

8.7CVSS5.8AI score0.00076EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2025/11/26 12:15 a.m.0 views

UBUNTU-CVE-2025-66019

pypdf is a free and open-source pure-python PDF library. Prior to version 6.4.0, an attacker who uses this vulnerability can craft a PDF which leads to a memory usage of up to 1 GB per stream. This requires parsing the content stream of a page using the LZWDecode filter. This issue has been patch...

8.7CVSS6.9AI score0.00076EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/11/25 11:38 p.m.1 views

CVE-2025-66019 pypdf manipulated LZWDecode streams can exhaust RAM

pypdf is a free and open-source pure-python PDF library. Prior to version 6.4.0, an attacker who uses this vulnerability can craft a PDF which leads to a memory usage of up to 1 GB per stream. This requires parsing the content stream of a page using the LZWDecode filter. This issue has been patch...

8.7CVSS6.4AI score0.00076EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2025/11/24 10:42 p.m.6 views

pypdf's LZWDecode streams be manipulated to exhaust RAM

Impact An attacker who uses this vulnerability can craft a PDF which leads to a memory usage of up to 1 GB per stream. This requires parsing the content stream of a page using the LZWDecode filter. This is a follow up to GHSA-jfx9-29x2-rv3j to align the default limit with the one for zlib. Patche...

8.7CVSS6.8AI score0.00076EPSS
Exploits0References7Affected Software1
EUVD
EUVD
added 2025/11/24 10:42 p.m.1 views

EUVD-2025-199017

pypdf's LZWDecode streams be manipulated to exhaust RAM...

6.4AI score
Exploits0References5
OpenVAS
OpenVAS
added 2025/11/12 12:0 a.m.0 views

Huawei EulerOS: Security Advisory for gdk-pixbuf2 (EulerOS-SA-2025-2353)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

3.3CVSS6.4AI score0.00102EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/11/12 12:0 a.m.2 views

EulerOS 2.0 SP12 : gdk-pixbuf2 (EulerOS-SA-2025-2322)

According to the versions of the gdk-pixbuf2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the GIF parser of GdkPixbufs LZW decoder. When an invalid symbol is encountered during decompression, the decoder sets th...

3.3CVSS6AI score0.00102EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2025/10/24 12:0 a.m.1 views

Huawei EulerOS: Security Advisory for gdk-pixbuf2 (EulerOS-SA-2025-2255)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.7AI score0.00938EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2025/10/24 12:0 a.m.1 views

Huawei EulerOS: Security Advisory for gdk-pixbuf2 (EulerOS-SA-2025-2287)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.7AI score0.00938EPSS
Exploits0References2
OSV
OSV
added 2025/10/22 10:15 p.m.1 views

DEBIAN-CVE-2025-62708

pypdf is a free and open-source pure-python PDF library. Prior to version 6.1.3, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing the content stream of a page using the LZWDecode filter. This has been fixed in pypdf version 6.1.3...

7.5CVSS5.3AI score0.00079EPSS
Exploits0References1
OSV
OSV
added 2025/10/22 9:36 p.m.2 views

CVE-2025-62708 pypdf manipulated LZWDecode streams can exhaust RAM

pypdf is a free and open-source pure-python PDF library. Prior to version 6.1.3, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing the content stream of a page using the LZWDecode filter. This has been fixed in pypdf version 6.1.3...

8.7CVSS6.9AI score0.00079EPSS
Exploits0References6
Debian CVE
Debian CVE
added 2025/10/22 9:36 p.m.4 views

CVE-2025-62708

pypdf is a free and open-source pure-python PDF library. Prior to version 6.1.3, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing the content stream of a page using the LZWDecode filter. This has been fixed in pypdf version 6.1.3...

8.7CVSS5.3AI score0.00079EPSS
Exploits0
CVE
CVE
added 2025/10/22 9:36 p.m.12 views

CVE-2025-62708

pypdf (Python PDF library) prior to version 6.1.3 is affected by CVE-2025-62708: an attacker can craft a PDF that triggers large memory usage when parsing a page content stream using the LZWDecode filter. The issue has been fixed in pypdf 6.1.3. This is documented in the CVE entry and corroborate...

8.7CVSS6.5AI score0.00079EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2025/10/22 9:36 p.m.9 views

CVE-2025-62708 pypdf manipulated LZWDecode streams can exhaust RAM

pypdf is a free and open-source pure-python PDF library. Prior to version 6.1.3, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing the content stream of a page using the LZWDecode filter. This has been fixed in pypdf version 6.1.3...

8.7CVSS0.00079EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2013-4148

Malware in sbrugna...

6.8CVSS9AI score0.0065EPSS
Exploits0References13
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2011-2869

Malware in sbrugna...

5.1CVSS7.2AI score0.07216EPSS
Exploits0References41
EUVD
EUVD
added 2025/10/07 12:30 a.m.0 views

EUVD-2020-21758

Malware in sbrugna...

5.5CVSS5.7AI score0.00634EPSS
Exploits0References11
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2019-14671

Malware in sbrugna...

9.8CVSS9.4AI score0.00619EPSS
Exploits1References2
Rows per page
Query Builder