pypdf: Manipulated XMP metadata entity declarations can exhaust RAM

Mô tả

Tham khảo

• py-pdf/pypdf security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2026-40260 · ADVISORY
• py-pdf/pypdf#3724 · WEB
• py-pdf/pypdf commit b15a374 · WEB
• py-pdf/pypdf · PACKAGE
• py-pdf/pypdf release 6.10.0 · WEB
• pypi.org/project/pypdf · PACKAGE
• GitHub Advisory GHSA-3crg-w4f6-42mx · ADVISORY

Lỗ hổng khác của pypdf

• CVE-2026-119209TRUNG BÌNH 5.5pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consume excessive memory while opening a crafted PDF con…
• CVE-2026-119208CAO 7.1pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consume excessive time and memory when an application ac…
• CVE-2026-119207CAO 7.1pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consume excessive memory when strict mode loads a crafte…
• CVE-2026-119206CAO 7.1pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can take excessive time to retrieve page labels from a craft…
• CVE-2026-119205CAO 7.1pypdf is a free and open-source pure-python PDF library. Prior to 6.21.4, pypdf can enter an infinite loop when cloning or duplicating a cra…