pypdf: Possible long runtimes for zero-only width values in cross-reference streamsuntimes for zero-only width values in cross-reference streams

Description

References

• py-pdf/pypdf security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2026-48156 · ADVISORY
• py-pdf/pypdf#3791 · WEB
• py-pdf/pypdf commit 507d7c9 · WEB
• py-pdf/pypdf · PACKAGE
• py-pdf/pypdf release 6.12.0 · WEB
• pypi.org/project/pypdf · PACKAGE
• GitHub Advisory GHSA-248m-82v9-q6g6 · ADVISORY

pypdf의 다른 취약점

• CVE-2026-119209보통 5.5pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consume excessive memory while opening a crafted PDF con…
• CVE-2026-119208높음 7.1pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consume excessive time and memory when an application ac…
• CVE-2026-119207높음 7.1pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consume excessive memory when strict mode loads a crafte…
• CVE-2026-119206높음 7.1pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can take excessive time to retrieve page labels from a craft…
• CVE-2026-119205높음 7.1pypdf is a free and open-source pure-python PDF library. Prior to 6.21.4, pypdf can enter an infinite loop when cloning or duplicating a cra…