Staging Environment: Content and features may be unstable or change without notice.

Advisory Severity Curation

GHSA-x284-j5p8-9c5p

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-x284-j5p8-9c5p

pypdf: Manipulated FlateDecode image dimensions can exhaust RAM ### Impact An attacker who uses this vulnerability can craft a PDF which leads to the RAM being exhausted. This requires accessing an image using `/FlateDecode` with large size values. ### Patches This has been fixed in pypdf==6.10.2 https://github.com/py-pdf/pypdf/releases/tag/6.10.2. ### Workarounds If you cannot upgrade yet, consider applying the changes from PR #3734 https://github.com/py-pdf/pypdf/pull/3734.

gitlab/pypi/pypdf/CVE-2026-41314

pypdf: Manipulated FlateDecode image dimensions can exhaust RAM An attacker who uses this vulnerability can craft a PDF which leads to the RAM being exhausted. This requires accessing an image using `/FlateDecode` with large size values.

gitlab/pypi/pypdf/GHSA-x284-j5p8-9c5p

pypdf: Manipulated FlateDecode image dimensions can exhaust RAM An attacker who uses this vulnerability can craft a PDF which leads to the RAM being exhausted. This requires accessing an image using `/FlateDecode` with large size values.

pypa/pypdf/PYSEC-2026-3026

pypdf: Manipulated FlateDecode image dimensions can exhaust RAM ### Impact An attacker who uses this vulnerability can craft a PDF which leads to the RAM being exhausted. This requires accessing an image using `/FlateDecode` with large size values. ### Patches This has been fixed in pypdf==6.10.2 https://github.com/py-pdf/pypdf/releases/tag/6.10.2. ### Workarounds If you cannot upgrade yet, consider applying the changes from PR #3734 https://github.com/py-pdf/pypdf/pull/3734.

pysec/PYSEC-2026-3026

pypdf: Manipulated FlateDecode image dimensions can exhaust RAM ### Impact An attacker who uses this vulnerability can craft a PDF which leads to the RAM being exhausted. This requires accessing an image using `/FlateDecode` with large size values. ### Patches This has been fixed in pypdf==6.10.2 https://github.com/py-pdf/pypdf/releases/tag/6.10.2. ### Workarounds If you cannot upgrade yet, consider applying the changes from PR #3734 https://github.com/py-pdf/pypdf/pull/3734.