Lucene search
+L

5 matches found

CVE
CVE
•added 2026/10/06 7:34 p.m.•8 views

CVE-2026-106063

A heap-based buffer overflow exists in the GIMP DICOM export plug-in (CWE-787). The vulnerability is triggered when exporting images with extremely large width and height dimensions, causing an integer overflow during the 32-bit calculation of the buffer size (width * height * bytes-per-pixel). C...

6.3CVSS
SaveExploits0References2
PyPA
PyPA
•added 2026/08/04 11:34 a.m.•29 views

pypdf: Possible large memory usage for wrong image dimensions

ImpactAn attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires loading images where the declared size values are much too large compared to the actual data. PatchesThis has been fixed in pypdf==6.14.0. WorkaroundsIf you cannot upgrade yet, consider...

6.9CVSS5.8AI score0.00515EPSS
SaveExploits0References8Affected Software1
OSV
OSV
•added 2026/08/04 11:34 a.m.•10 views

PYSEC-2026-3611 pypdf: Possible large memory usage for wrong image dimensions

Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires loading images where the declared size values are much too large compared to the actual data. Patches This has been fixed in pypdf==6.14.0. Workarounds If you cannot upgrade yet, consid...

6.9CVSS5.8AI score0.00515EPSS
SaveExploits0References8
Snyk
Snyk
•added 2026/07/08 6:44 p.m.•28 views

Memory Allocation with Excessive Size Value

Overview pypdf is an A pure-python PDF library capable of splitting, merging, cropping, and transforming PDF files Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value via the image parsing process. An attacker can cause excessive memory consumption by...

6.9CVSS5.8AI score0.00515EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/04/24 2:31 a.m.•9 views

CVE-2026-41309

Open Source Social Network OSSN is open-source social networking software developed in PHP. Versions prior to 9.0 are vulnerable to resource exhaustion. An attacker can upload a specially crafted image with extreme pixel dimensions e.g., $10000 \times 10000$ pixels. While the compressed file size...

8.2CVSS5.7AI score0.00663EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder