Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cj93-chg6-vgv8

Опубликовано: 12 июн. 2026
Источник: github
Github: Прошло ревью
CVSS4: 4.8

Описание

pypdf: Possible large memory usage for large offsets for layout mode text

Impact

An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires extracting text in layout mode with large character offsets.

Patches

This has been fixed in pypdf==6.12.0.

Workarounds

If developers are unable to immediately upgrade, they should consider applying the changes from PR #3790.

Пакеты

Наименование

pypdf

pip
Затронутые версииВерсия исправления

< 6.12.0

6.12.0

EPSS

Процентиль: 3%
0.00127
Низкий

4.8 Medium

CVSS4

Дефекты

CWE-400

Связанные уязвимости

CVSS3: 5.5
ubuntu
2 месяца назад

pypdf is a free and open-source pure-python PDF library. Prior to 6.12.0, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires extracting text in layout mode with large character offsets. This vulnerability is fixed in 6.12.0.

CVSS3: 5.5
redhat
2 месяца назад

pypdf is a free and open-source pure-python PDF library. Prior to 6.12.0, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires extracting text in layout mode with large character offsets. This vulnerability is fixed in 6.12.0.

CVSS3: 5.5
nvd
2 месяца назад

pypdf is a free and open-source pure-python PDF library. Prior to 6.12.0, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires extracting text in layout mode with large character offsets. This vulnerability is fixed in 6.12.0.

CVSS3: 5.5
debian
2 месяца назад

pypdf is a free and open-source pure-python PDF library. Prior to 6.12 ...

CVSS3: 4
redos
10 дней назад

Уязвимость python-PyPDF2

EPSS

Процентиль: 3%
0.00127
Низкий

4.8 Medium

CVSS4

Дефекты

CWE-400