8 matches found
GHSA-5849-834G-HVW5 pypdf has possible infinite loop when hitting EOF in standard xref table during trailer search
Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires opening an incomplete file without a trailer. Patches This has been fixed in pypdf==6.21.4. Workarounds If you cannot upgrade yet, consider applying the changes from PR 4289...
pypdf has possible infinite loop when hitting EOF in standard xref table during trailer search
Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires opening an incomplete file without a trailer. Patches This has been fixed in pypdf==6.21.4. Workarounds If you cannot upgrade yet, consider applying the changes from PR 4289...
CVE-2026-119203
The pypdf pure-python PDF library is vulnerable to a Denial of Service (DoS) condition in versions prior to 6.21.4 . A crafted incomplete PDF file can trigger an infinite loop during the trailer search if the standard cross-reference table reaches the end of the file (EOF) without a trailer. This...
CVE-2026-119203 pypdf: Possible infinite loop when hitting EOF in standard xref table during trailer search
pypdf is a free and open-source pure-python PDF library. Prior to 6.21.4, pypdf can enter an infinite loop while opening a crafted incomplete PDF whose standard cross-reference table reaches the end of the file without a trailer. The trailer search can repeatedly rewind to the same stream positio...
CVE-2026-119203 pypdf: Possible infinite loop when hitting EOF in standard xref table during trailer search
pypdf is a free and open-source pure-python PDF library. Prior to 6.21.4, pypdf can enter an infinite loop while opening a crafted incomplete PDF whose standard cross-reference table reaches the end of the file without a trailer. The trailer search can repeatedly rewind to the same stream positio...
CVE-2026-119203 pypdf: Possible infinite loop when hitting EOF in standard xref table during trailer search
pypdf is a free and open-source pure-python PDF library. Prior to 6.21.4, pypdf can enter an infinite loop while opening a crafted incomplete PDF whose standard cross-reference table reaches the end of the file without a trailer. The trailer search can repeatedly rewind to the same stream positio...
USN-5282-1 pdfresurrect vulnerabilities
It was discovered that PDFResurrect was incorrectly handling corrupted PDF files. An attacker could possibly use this issue to cause a buffer overflow, resulting in a denial of service, or arbitrary code execution. This issue only affected Ubuntu 16.04 ESM and Ubuntu 18.04 ESM. CVE-2019-14267 It...
USN-5282-1: PDFResurrect vulnerabilities
It was discovered that PDFResurrect was incorrectly handling corrupted PDF files. An attacker could possibly use this issue to cause a buffer overflow, resulting in a denial of service, or arbitrary code execution. This issue only affected Ubuntu 16.04 ESM and Ubuntu 18.04 ESM. CVE-2019-14267 It...