CVE-2026-115580:详情

CVE-2026-115580

2026-10-23
20h17 +00:00
2026-11-02
16h06 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
管理通知

CVE 描述

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.2, an attacker can craft a PDF with a standard cross-reference table whose declared entry count exceeds what the file can contain, causing excessive processing and long runtimes when the file is opened. This issue is fixed in version 6.21.2.

CVE 信息

相关弱点

CWE-ID 弱点名称 来源
CWE-834 Excessive Iteration
The product performs an iteration or loop without sufficiently limiting the number of times that the loop is executed.

参考资料