CVE-2026-115580:詳細資料

CVE-2026-115580

2026-10-23
20h17 +00:00
2026-11-02
16h06 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
管理通知

CVE 描述

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.2, an attacker can craft a PDF with a standard cross-reference table whose declared entry count exceeds what the file can contain, causing excessive processing and long runtimes when the file is opened. This issue is fixed in version 6.21.2.

CVE 資訊

相關弱點

CWE-ID 弱點名稱 來源
CWE-834 Excessive Iteration
The product performs an iteration or loop without sufficiently limiting the number of times that the loop is executed.

參考資料