Lucene search
K

35 matches found

SUSE CVE
SUSE CVE
added 5 days ago6 views

SUSE CVE-2026-48156

pypdf is a free and open-source pure-python PDF library. Prior to 6.12.0, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires cross-reference streams with /W 0 0 0 values and large /Size values. This vulnerability is fixed in 6.12.0...

5.1CVSS5.8AI score0.00012EPSS
Exploits0References3
OSV
OSV
added last week3 views

DEBIAN-CVE-2026-48156

pypdf is a free and open-source pure-python PDF library. Prior to 6.12.0, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires cross-reference streams with /W 0 0 0 values and large /Size values. This vulnerability is fixed in 6.12.0...

3.3CVSS5.8AI score0.00012EPSS
Exploits0References1
OSV
OSV
added last week4 views

UBUNTU-CVE-2026-48156

pypdf is a free and open-source pure-python PDF library. Prior to 6.12.0, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires cross-reference streams with /W 0 0 0 values and large /Size values. This vulnerability is fixed in 6.12.0...

5.1CVSS5.8AI score0.00012EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/05/28 12:0 a.m.5 views

pypdf 安全漏洞

pypdf is an open-source, free, and pure Python PDF library developed by py-pdf. It allows for splitting, merging, cropping, and converting pages of PDF files. Prior to version 6.12.0, pypdf had security vulnerabilities. These vulnerabilities stemmed from the use of cross-references involving valu...

5.1CVSS5.8AI score0.00012EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/05/28 12:0 a.m.5 views

PT-2026-44393

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.12.0 Description A flaw in the pure-python PDF library allows an attacker to craft a PDF file that causes long runtimes. This is achieved by using cross-reference streams with /W 0 0 0 values and large /Size values...

5.1CVSS5.8AI score0.00012EPSS
Exploits0References5
EUVD
EUVD
added 2026/05/21 12:30 a.m.7 views

EUVD-2026-31201

A flaw was found in libsolv. This heap buffer overflow vulnerability occurs when a victim processes a specially crafted .solv file containing negative size values in the repoaddsolv function. This leads to an undersized memory allocation and a subsequent out-of-bounds write. An attacker could...

6.5CVSS5.9AI score0.00054EPSS
Exploits0References4
OSV
OSV
added 2026/05/21 12:16 a.m.1 views

DEBIAN-CVE-2026-9149

A flaw was found in libsolv. This heap buffer overflow vulnerability occurs when a victim processes a specially crafted .solv file containing negative size values in the repoaddsolv function. This leads to an undersized memory allocation and a subsequent out-of-bounds write. An attacker could...

6.5CVSS5.9AI score0.00054EPSS
Exploits0References1
OSV
OSV
added 2026/04/22 9:17 p.m.1 views

DEBIAN-CVE-2026-41168

pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.1 can craft a PDF which leads to long runtimes. This requires cross-reference streams with wrong large /Size values or object streams with wrong large /N values. This ha...

5.3CVSS5.3AI score0.00052EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2026/04/22 8:49 p.m.4 views

CVE-2026-41168

pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.1 can craft a PDF which leads to long runtimes. This requires cross-reference streams with wrong large /Size values or object streams with wrong large /N values. This ha...

6.9CVSS5.3AI score0.00052EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2026/04/22 12:0 a.m.0 views

PT-2026-34562

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.10.1 Description A flaw in the pure-python PDF library allows an attacker to craft a PDF that results in long runtimes. This is achieved by using cross-reference streams with incorrect large /Size values or object...

6.9CVSS5.1AI score0.00052EPSS
Exploits0References9
OSV
OSV
added 2026/04/16 9:30 p.m.0 views

GHSA-X284-J5P8-9C5P pypdf: Manipulated FlateDecode image dimensions can exhaust RAM

Impact An attacker who uses this vulnerability can craft a PDF which leads to the RAM being exhausted. This requires accessing an image using /FlateDecode with large size values. Patches This has been fixed in pypdf==6.10.2. Workarounds If you cannot upgrade yet, consider applying the changes fro...

6.8CVSS5.7AI score0.00025EPSS
Exploits0References6
Github Security Blog
Github Security Blog
added 2026/04/15 7:43 p.m.4 views

pypdf has long runtimes for wrong size values in cross-reference and object streams

Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires cross-reference streams with wrong large /Size values or object streams with wrong large /N values. Patches This has been fixed in pypdf==6.10.1. Workarounds If you cannot upgrade yet,...

6.9CVSS5.7AI score0.00052EPSS
Exploits0References6Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/04/09 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2026-5439

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A memory exhaustion vulnerability exists in ZIP archive processing. Orthanc automatically extracts ZIP archives uploaded to certain endpoints and trusts metadat...

7.5CVSS5.8AI score0.0006EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/01/10 12:0 a.m.1 views

pypdf 资源管理错误漏洞

pypdf is py-pdf open source a free open source pure python PDF library . Able to split , merge , crop and convert pages of PDF files . pypdf versions prior to 6.6.0 has a resource management error vulnerability , the vulnerability stems from the processing of missing Root objects and large Size...

6.9CVSS6.4AI score0.00023EPSS
Exploits0References4
EUVD
EUVD
added 2026/01/09 7:48 p.m.1 views

EUVD-2026-1692

pypdf has possible long runtimes for missing /Root object with large /Size values...

6.4AI score
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2004-2363

Malware in sbrugna...

5CVSS6.4AI score0.04213EPSS
Exploits1References6
Debian CVE
Debian CVE
added 2025/09/22 12:0 a.m.3 views

CVE-2025-59799

Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow in pdfmarkcoercedest in devices/vector/gdevpdfm.c via a large size value...

5.5CVSS5.9AI score0.00018EPSS
Exploits0
CNNVD
CNNVD
added 2024/05/02 12:0 a.m.1 views

WordPress plugin HT Mega 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

6.4CVSS6.1AI score0.00134EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2016/11/22 12:0 a.m.119 views

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2016-3644)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-3644 advisory. - acpi: Disable ACPI table override if securelevel is set Linn Crosetto Orabug: 25058966 CVE-2016-3699 - aacraid: Check size values after...

7.8CVSS6.6AI score0.00424EPSS
Exploits9References11
OSV
OSV
added 2016/08/30 5:59 p.m.0 views

UBUNTU-CVE-2016-5344

Multiple integer overflows in the MDSS driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allow attackers to cause a denial of service or possibly have unspecified other impact via a large size value, related to...

9.8CVSS7.1AI score0.00651EPSS
Exploits0References4
Rows per page
Query Builder