PT-2026-44392 · Pypi · Pypdf

Sondt99 · Publicado 2026-05-28 · Atualizado 2026-06-12 · CVE-2026-48155

Positive Technologies (AI Summary) · Pt

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Nome do Software Vulnerável e Versões Afetadas pypdf versões anteriores a 6.12.0

Description Uma falha na biblioteca PDF em pure-python permite que um invasor crie um arquivo PDF que cause consumo excessivo de memória. Isso ocorre ao extrair texto no modo de layout usando offsets de caracteres grandes.

Recommendations Atualize para a versão 6.12.0.

Correção

Resource Exhaustion

Enumeração de Fraquezas

CWE-400

Identificadores relacionados

CVE-2026-48155

GHSA-CJ93-CHG6-VGV8

OPENSUSE-SU-2026:10974-1

Produtos afetados

Pypdf

Referências · 15

• https://github.com/py-pdf/pypdf/security/advisories/GHSA-cj93-chg6-vgv8 · Aviso do Fabricante
• https://github.com/py-pdf/pypdf/pull/3790 · Correção
• https://github.com/py-pdf/pypdf/releases/tag/6.12.0 · Nota
• https://github.com/py-pdf/pypdf · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-48155 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-48155 · Nota de Segurança
• https://osv.dev/vulnerability/GHSA-cj93-chg6-vgv8 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-48155 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2026-48155 · Nota
• https://t.me/cveNotify/165259 · Publicação no Telegram
• https://ubuntu.com/security/CVE-2026-48155 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2026-48155 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2026-48155 · Nota de Segurança
• https://osv.dev/vulnerability/openSUSE-SU-2026:10974-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2026-48735 · Nota