CVE-2026-119203

A flaw was found in pypdf. This vulnerability allows an attacker to cause a Denial of Service DoS by tricking a user or application into processing a specially crafted PDF document. When the library parses an incomplete file where the cross-reference table ends without a trailer, the parser...

CVE-2026-118040

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, improper verification of cryptographic signatures and improper certificate validation in RadPdfProcessing digital signature validation allow an unauthenticated attacker to cause signature validation to report forged...

CVE-2026-118040

Progress Telerik Document Processing Libraries prior to version 2026.3.1027 are vulnerable to improper verification of cryptographic signatures and improper certificate validation within the RadPdfProcessing digital signature validation component. This flaw allows an unauthenticated attacker to u...

PT-2026-128222

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, improper verification of cryptographic signatures and improper certificate validation in RadPdfProcessing digital signature validation allow an unauthenticated attacker to cause signature validation to report forged...

CVE-2026-115572

A flaw was found in pypdf. An attacker can supply a specially crafted PDF document containing repeated references to nonexistent objects, triggering repetitive full-file recovery attempts during parsing. When processed, this flaw leads to excessive resource consumption and significant delays,...

CVE-2026-113786

A flaw was found in pypdf. A remote attacker could trigger a Denial of Service DoS or unexpected behavior by enticing a user or service to process a specially crafted PDF document. When an image marked with a JPEG filter is loaded, pypdf fails to restrict decoding to the JPEG format before passin...

CVE-2026-113795

A flaw was found in pypdf. A remote attacker could cause a Denial of Service DoS by convincing a user or application to process a specially crafted PDF document. By providing a PDF stream configured with an excessive number of filters or filters that pass around large volumes of data, an attacker...

CVE-2026-113793

A flaw was found in pypdf. This vulnerability allows a remote attacker to cause a Denial of Service DoS by providing a specially crafted PDF document containing cyclic tree structures. When an application attempts to remove an object from the cyclic structure, the library enters an infinite loop,...

Microsoft Windows PDF Document Processing Code Execution

The vulnerability of the Microsoft Windows PDF document processing component on Windows operating systems is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : LibreOffice vulnerabilities (USN-8868-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8868-1 advisory. It was discovered that LibreOffice incorrectly handled WMF image imports. An attacker could possibly use this issue to cause...

USN-8868-1 libreoffice vulnerabilities

It was discovered that LibreOffice incorrectly handled WMF image imports. An attacker could possibly use this issue to cause LibreOffice to crash, resulting in a denial of service, or execute arbitrary code. CVE-2026-63272 It was discovered that LibreOffice incorrectly handled PDF document import...

USN-8868-1: LibreOffice vulnerabilities

It was discovered that LibreOffice incorrectly handled WMF image imports. An attacker could possibly use this issue to cause LibreOffice to crash, resulting in a denial of service, or execute arbitrary code. CVE-2026-63272 It was discovered that LibreOffice incorrectly handled PDF document import...

CVE-2026-95338

An use after free flaw was found in the PDFium component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/556535630...

CVE-2026-63273

A flaw was found in LibreOffice Draw. This vulnerability allows a remote attacker to cause a denial of service by crafting a specially designed encrypted PDF document. When a user opens this malicious document, a heap buffer overflow occurs because the software incorrectly handles the decryption...

io.github.agentic-spring-ai:agentic-spring-ai-starter-document-parser-apache-pdfbox (2.0.0.0), io.github.agentic-spring-ai:agentic-spring-ai-starter-document-parser-bibtex (2.0.0.0) +1 more potentially affected by CVE-2026-47851 via org.springframework.ai:spring-ai-pdf-document-reader (2.0.0)

org.springframework.ai:spring-ai-pdf-document-reader MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.ai:spring-ai-pdf-document-reader and may be impacted: -...

CVE-2026-47851

CVE-2026-47851 is a denial-of-service vulnerability in the Spring AI PDF Document Reader . When analyzing a PDF whose table of contents (outline tree) is deeply nested or cyclic, unbounded recursion triggers a StackOverflowError in the ingestion thread. The attack requires no privileges or user i...

CVE-2026-47851 Unbounded recursion over attacker-controlled PDF outline tree in Spring AI PDF Document Reader

Analyzing a PDF with a deeply nested or cyclic table of contents can cause a StackOverflowError in the ingestion thread. Spring AI 2.0.0 Spring AI 1.1.0 - 1.1.8 Spring AI 1.0.0 - 1.0.9...

CVE-2026-47851 Unbounded recursion over attacker-controlled PDF outline tree in Spring AI PDF Document Reader

Analyzing a PDF with a deeply nested or cyclic table of contents can cause a StackOverflowError in the ingestion thread. Spring AI 2.0.0 Spring AI 1.1.0 - 1.1.8 Spring AI 1.0.0 - 1.0.9...

CVE-2026-47851 Unbounded recursion over attacker-controlled PDF outline tree in Spring AI PDF Document Reader

Analyzing a PDF with a deeply nested or cyclic table of contents can cause a StackOverflowError in the ingestion thread. Spring AI 2.0.0 Spring AI 1.1.0 - 1.1.8 Spring AI 1.0.0 - 1.0.9...

cve-2026-47851 - HIGH - Unbounded recursion over attacker-controlled PDF outline tree in Spring AI PDF Document Reader

cve-2026-47851 - HIGH - Unbounded recursion over attacker-controlled PDF outline tree in Spring AI PDF Document Reader...