Bug 2563681 (CVE-2026-119204)
| Summary: | CVE-2026-119204 pypdf: pypdf: Denial of Service via excessive memory consumption during PDF parsing | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability | Assignee: | Product Security DevOps Team <prodsec-dev> |
| Status: | NEW --- | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | unspecified | CC: | anpicker, bbrownin, blitton, doconnor, dschmidt, ebourniv, hasun, jfula, jlanda, jowilson, kshier, mbarnett, nyancey, ometelka, ptisnovs, rbobbitt, sbunciak, simaishi, stcannon, syedriko, xdharmai, yguenane |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in pypdf. A remote attacker could exploit this vulnerability by enticing a user or automated processing service to open a crafted PDF file containing shared page resources. When parsing the document's page tree structure, the library copies inherited resource entries without an allocation limit, leading to excessive memory usage. This issue can exhaust available system memory and cause the application to crash, resulting in a Denial of Service (DoS).
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
OSIDB Bzimport
2026-10-29 20:58:09 UTC
|