pypdf: Possible infinite loop when hitting EOF in standard xref table
An attacker can trigger an infinite loop in pypdf by supplying a crafted, incomplete PDF file that terminates inside the xref table.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
An attacker can trigger an infinite loop in pypdf by supplying a crafted, incomplete PDF file that terminates inside the xref table.
A vulnerability in pypdf allows an attacker to cause an infinite loop by providing a crafted PDF when an object, such as an outline item, is removed from a tree.
A vulnerability in pypdf allows attackers to craft a malicious PDF document that triggers an infinite loop when processing outline items, potentially causing a denial of service.
A vulnerability in pypdf allows attackers to trigger excessive memory consumption by supplying crafted PDF streams configured with numerous or data-heavy filters.
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.