Lucene search
K

47 matches found

SUSE CVE
SUSE CVE
added 4 days ago6 views

SUSE CVE-2026-48155

pypdf is a free and open-source pure-python PDF library. Prior to 6.12.0, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires extracting text in layout mode with large character offsets. This vulnerability is fixed in 6.12.0...

5.5CVSS5.8AI score0.00011EPSS
Exploits0References3
OSV
OSV
added 6 days ago3 views

UBUNTU-CVE-2026-48155

pypdf is a free and open-source pure-python PDF library. Prior to 6.12.0, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires extracting text in layout mode with large character offsets. This vulnerability is fixed in 6.12.0...

5.5CVSS5.8AI score0.00011EPSS
Exploits0References5
Cvelist
Cvelist
added 6 days ago23 views

CVE-2026-48155 pypdf: Possible large memory usage for large offsets for layout mode text

pypdf is a free and open-source pure-python PDF library. Prior to 6.12.0, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires extracting text in layout mode with large character offsets. This vulnerability is fixed in 6.12.0...

4.8CVSS0.00011EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 6 days ago2 views

CVE-2026-48155

pypdf is a free and open-source pure-python PDF library. Prior to 6.12.0, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires extracting text in layout mode with large character offsets. This vulnerability is fixed in 6.12.0...

4.8CVSS5.8AI score0.00011EPSS
Exploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 6 days ago3 views

PT-2026-44392

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.12.0 Description A flaw in the pure-python PDF library allows an attacker to craft a PDF file that causes excessive memory consumption. This occurs when extracting text in layout mode using large character offsets...

5.5CVSS5.8AI score0.00011EPSS
Exploits0References5
CNNVD
CNNVD
added 6 days ago5 views

pypdf 资源管理错误漏洞

pypdf is an open-source, free Python library developed by py-pdf. It allows for splitting, merging, cropping, and converting pages within PDF files. Prior to version 6.12.0, pypdf had a resource management vulnerability caused by the use of large character offsets when extracting text in layout...

5.5CVSS5.8AI score0.00011EPSS
Exploits0References3
NVD
NVD
added 2026/03/29 6:16 p.m.2 views

CVE-2026-0558

A vulnerability in parisneo/lollms, up to and including version 2.2.0, allows unauthenticated users to upload and process files through the /api/files/extract-text endpoint. This endpoint does not enforce authentication, unlike other file-related endpoints, and lacks the Dependsgetcurrentactiveus...

9.8CVSS0.00451EPSS
Exploits1References2
Veracode
Veracode
added 2026/02/28 5:14 a.m.3 views

Denial Of Service

pypdf is vulnerable to Denial of Service. The vulnerability is due to an attacker crafting a PDF with unusually large values in the /ToUnicode entry of a font, where parsing this entry leads to long runtimes and large memory consumption, and how attackers can exploit it by using this vulnerabilit...

6.9CVSS5.3AI score0.00006EPSS
Exploits0References4Affected Software1
SUSE CVE
SUSE CVE
added 2026/02/24 12:24 a.m.0 views

SUSE CVE-2026-27025

pypdf is a free and open-source pure-python PDF library. Prior to 6.7.1, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consumption. This requires parsing the /ToUnicode entry of a font with unusually large values, for example during text...

5.5CVSS5.7AI score0.00006EPSS
Exploits0References3
NVD
NVD
added 2026/02/20 10:16 p.m.4 views

CVE-2026-27025

pypdf is a free and open-source pure-python PDF library. Prior to 6.7.1, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consumption. This requires parsing the /ToUnicode entry of a font with unusually large values, for example during text...

6.9CVSS0.00006EPSS
Exploits0References4
OSV
OSV
added 2026/02/20 10:16 p.m.4 views

DEBIAN-CVE-2026-27025

pypdf is a free and open-source pure-python PDF library. Prior to 6.7.1, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consumption. This requires parsing the /ToUnicode entry of a font with unusually large values, for example during text...

5.5CVSS5.4AI score0.00006EPSS
Exploits0References1
OSV
OSV
added 2026/02/20 9:11 p.m.6 views

CVE-2026-27025 pypdf has possible long runtimes/large memory usage for large /ToUnicode streams

pypdf is a free and open-source pure-python PDF library. Prior to 6.7.1, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consumption. This requires parsing the /ToUnicode entry of a font with unusually large values, for example during text...

6.9CVSS5.5AI score0.00006EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2026/02/19 12:0 a.m.3 views

PT-2026-20908

pypdf is a free and open-source pure-python PDF library. Prior to 6.7.1, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consumption. This requires parsing the /ToUnicode entry of a font with unusually large values, for example during text...

6.9CVSS5.6AI score0.00006EPSS
Exploits0References5
Fedora
Fedora
added 2026/01/11 12:55 a.m.5 views

[SECURITY] Fedora 42 Update: python-pdfminer-20240706-5.fc42

Pdfminer.six is a community maintained fork of the original PDFMiner. It is a tool for extracting information from PDF documents. It focuses on getting and analyzing text data. Pdfminer.six extracts the text from a page directly from the sourcecode of the PDF. It can also be used to get the exact...

8.6CVSS6.7AI score0.00143EPSS
Exploits1
Fedora
Fedora
added 2026/01/08 1:28 a.m.3 views

[SECURITY] Fedora 43 Update: python-pdfminer-20251230-1.fc43

Pdfminer.six is a community maintained fork of the original PDFMiner. It is a tool for extracting information from PDF documents. It focuses on getting and analyzing text data. Pdfminer.six extracts the text from a page directly from the sourcecode of the PDF. It can also be used to get the exact...

8.6CVSS6.4AI score0.00143EPSS
Exploits1
Fedora
Fedora
added 2025/11/17 3:36 a.m.5 views

[SECURITY] Fedora 41 Update: python-pdfminer-20240706-3.fc41

Pdfminer.six is a community maintained fork of the original PDFMiner. It is a tool for extracting information from PDF documents. It focuses on getting and analyzing text data. Pdfminer.six extracts the text from a page directly from the sourcecode of the PDF. It can also be used to get the exact...

8.6CVSS6.4AI score0.00143EPSS
Exploits1
Fedora
Fedora
added 2025/11/17 2:59 a.m.5 views

[SECURITY] Fedora 42 Update: python-pdfminer-20240706-4.fc42

Pdfminer.six is a community maintained fork of the original PDFMiner. It is a tool for extracting information from PDF documents. It focuses on getting and analyzing text data. Pdfminer.six extracts the text from a page directly from the sourcecode of the PDF. It can also be used to get the exact...

8.6CVSS6.4AI score0.00143EPSS
Exploits1
Fedora
Fedora
added 2025/11/17 2:47 a.m.5 views

[SECURITY] Fedora 43 Update: python-pdfminer-20251107-1.fc43

Pdfminer.six is a community maintained fork of the original PDFMiner. It is a tool for extracting information from PDF documents. It focuses on getting and analyzing text data. Pdfminer.six extracts the text from a page directly from the sourcecode of the PDF. It can also be used to get the exact...

8.6CVSS6.4AI score0.00143EPSS
Exploits1
Fedora
Fedora
added 2025/10/04 12:53 a.m.7 views

[SECURITY] Fedora 42 Update: mupdf-1.26.3-4.fc42

MuPDF is a lightweight PDF viewer and toolkit written in portable C. The renderer in MuPDF is tailored for high quality anti-aliased graphics. MuPDF renders text with metrics and spacing accurate to within fractions of a pixel for the highest fidelity in reproducing the look of a printed page on...

7.5CVSS7.1AI score0.00066EPSS
Exploits0
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-43736

Malicious code in bioql PyPI...

3.3CVSS5.9AI score0.00044EPSS
Exploits1References2
Rows per page
Query Builder