Lucene search
+L

7 matches found

osv_pysec
osv_pysec
•added 2026/07/07 4:03 p.m.•23 views

PYSEC-2026-1827 pypdf has possible Infinite Loop when processing outlines/bookmarks

Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires accessing the outlines/bookmarks. Patches This has been fixed in pypdf 6.6.2. Workarounds If projects cannot upgrade yet, consider applying the changes from PR 3610...

5.1CVSS5.4AI score0.00451EPSS
SaveExploits3References8
UbuntuCve
UbuntuCve
•added 2026/01/27 8:16 p.m.•18 views

CVE-2026-24688

pypdf is a free and open-source pure-python PDF library. An attacker who uses an infinite loop vulnerability that is present in versions prior to 6.6.2 can craft a PDF which leads to an infinite loop. This requires accessing the outlines/bookmarks. This has been fixed in pypdf 6.6.2. If projects...

5.1CVSS5.3AI score0.00451EPSS
SaveExploits3References5
Cvelist
Cvelist
•added 2026/01/27 7:44 p.m.•35 views

CVE-2026-24688 pypdf has possible Infinite Loop when processing outlines/bookmarks

pypdf is a free and open-source pure-python PDF library. An attacker who uses an infinite loop vulnerability that is present in versions prior to 6.6.2 can craft a PDF which leads to an infinite loop. This requires accessing the outlines/bookmarks. This has been fixed in pypdf 6.6.2. If projects...

5.1CVSS0.00451EPSS
SaveExploits3References4
CVE
CVE
•added 2026/01/27 7:44 p.m.•141 views

CVE-2026-24688

CVE-2026-24688 affects the pypdf library (Python). The vulnerability is an infinite loop in outline/bookmark processing that can be triggered by crafting a PDF; versions before 6.6.2 are vulnerable. The issue is fixed in pypdf 6.6.2. If upgrading is not yet possible, apply the changes from PR #36...

5.1CVSS5.3AI score0.00451EPSS
SaveExploits3References4Affected Software1
attackerkb
attackerkb
•added 2026/01/27 7:44 p.m.•35 views

CVE-2026-24688

pypdf is a free and open-source pure-python PDF library. An attacker who uses an infinite loop vulnerability that is present in versions prior to 6.6.2 can craft a PDF which leads to an infinite loop. This requires accessing the outlines/bookmarks. This has been fixed in pypdf 6.6.2. If projects...

5.1CVSS5.3AI score0.00451EPSS
SaveExploits3References5Affected Software1
EUVD
EUVD
•added 2026/01/27 7:44 p.m.•17 views

EUVD-2026-4753

pypdf is a free and open-source pure-python PDF library. An attacker who uses an infinite loop vulnerability that is present in versions prior to 6.6.2 can craft a PDF which leads to an infinite loop. This requires accessing the outlines/bookmarks. This has been fixed in pypdf 6.6.2. If projects...

5.1CVSS5.3AI score0.00451EPSS
SaveExploits3References4
Github Security Blog
Github Security Blog
•added 2026/01/26 11:37 p.m.•34 views

pypdf has possible Infinite Loop when processing outlines/bookmarks

Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires accessing the outlines/bookmarks. Patches This has been fixed in pypdf 6.6.2. Workarounds If projects cannot upgrade yet, consider applying the changes from PR 3610...

5.1CVSS5.4AI score0.00451EPSS
SaveExploits3References6Affected Software1
Rows per page
Query Builder