Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2026-84311

Опубликовано: 02 сент. 2026
Источник: ubuntu
Приоритет: medium

Описание

(pypdf is a free and open-source pure-python PDF library. Prior to 6.16 ...)

РелизСтатусПримечание
devel

needs-triage

esm-apps/noble

needs-triage

esm-apps/resolute

needs-triage

jammy

DNE

noble

needs-triage

resolute

needs-triage

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps-legacy/xenial

needs-triage

esm-apps/bionic

needs-triage

esm-apps/focal

needs-triage

esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

jammy

needs-triage

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

Связанные уязвимости

CVSS3: 5.5
redhat
15 дней назад

pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/_page.py PageObject._extract_text and PageObject.extract_xform_text to traverse a directed acyclic graph of reused form XObjects in which each form invokes a child multiple times, creating exponentially many traversal paths and causing long runtimes and large memory consumption. This issue is fixed in version 6.16.1.

nvd
15 дней назад

pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/_page.py PageObject._extract_text and PageObject.extract_xform_text to traverse a directed acyclic graph of reused form XObjects in which each form invokes a child multiple times, creating exponentially many traversal paths and causing long runtimes and large memory consumption. This issue is fixed in version 6.16.1.

debian
15 дней назад

pypdf is a free and open-source pure-python PDF library. Prior to 6.16 ...

github
15 дней назад

pypdf: Possible long runtimes/large memory usage when extracting XForm objects

CVSS3: 4.3
fstec
около 1 месяца назад

Уязвимость функций PageObject._extract_text() и PageObject.extract_xform_text() библиотеки Python для работы с PDF файлами PyPDF, позволяющая нарушителю вызвать отказ в обслуживании