Lucene search
+L

1 matches found

OSV
OSV
added 2025/11/24 10:42 p.m.9 views

GHSA-M449-CWJH-6PW7 pypdf's LZWDecode streams be manipulated to exhaust RAM

Impact An attacker who uses this vulnerability can craft a PDF which leads to a memory usage of up to 1 GB per stream. This requires parsing the content stream of a page using the LZWDecode filter. This is a follow up to GHSA-jfx9-29x2-rv3j to align the default limit with the one for zlib. Patche...

8.7CVSS6.7AI score0.00353EPSS
SaveExploits0References7
Rows per page
Query Builder