PT-2026-44392 · Pypi+1 · Pypdf+1

Sondt99 · CVE-2026-48155 · Publicado 2026-05-28 · Atualizado 2026-07-28

Positive Technologies (AI Summary) · Pt

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Nome do Software Vulnerável e Versões Afetadas pypdf versões anteriores a 6.12.0

Description Uma falha na biblioteca PDF em pure-python permite que um invasor crie um arquivo PDF que cause consumo excessivo de memória. Isso ocorre ao extrair texto no modo de layout usando offsets de caracteres grandes.

Recommendations Atualize para a versão 6.12.0.

Exploit

Correção

DoS

Resource Exhaustion

Enumeração de Fraquezas

CWE-400

Identificadores relacionados

CLEANSTART-2026-EH47852

CLEANSTART-2026-GN02455

CVE-2026-48155

GHSA-CJ93-CHG6-VGV8

OPENSUSE-SU-2026:10974-1

PYSEC-2026-3016

Produtos afetados

Red Os

Pypdf

Referências · 82

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/48xxx/CVE-2026-48155.json · Exploit
• https://github.com/py-pdf/pypdf · Nota
• https://github.com/py-pdf/pypdf/security/advisories/GHSA-cj93-chg6-vgv8 · Aviso do Fabricante
• https://github.com/py-pdf/pypdf/pull/3790 · Correção
• https://github.com/py-pdf/pypdf/releases/tag/6.12.0 · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-EH47852.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-GN02455.json · Nota
• https://suse.com/security/cve/CVE-2026-48735 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-54531 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2026-59938 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2026-48818 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2026-48526 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2026-48155 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-54283 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2026-48524 · Nota de Segurança