Beveiligingsadvies

CVE-2026-57204

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-30 21:59:46

Laatst bijgewerkt 2026-07-01 14:29:01

Toegewezen door GitHub_M

CVSS-score 6.9

Status PUBLISHED

Beschrijving

pypdf is a free and open-source pure-python PDF library. Prior to 6.13.3, a maliciously crafted PDF can cause DoS. An attacker who uses this vulnerability can craft a PDF which leads to large memory usage, as MAX_DECLARED_STREAM_LENGTH is sometimes ignored. This requires parsing a content stream without a /Length value. This issue has been fixed in version 6.13.3.

← Alle CVE's bekijken Bekijk op cve.org ↗