漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
pypdf: manipulated stream length values can exhaust RAM
Vulnerability Description
pypdf is a free and open-source pure-python PDF library. Prior to 6.8.0, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing a content stream with a rather large /Length value, regardless of the actual data length inside the stream. This vulnerability is fixed in 6.8.0.
CVSS Information
N/A
Vulnerability Type
不加限制或调节的资源分配
Vulnerability Title
pypdf 安全漏洞
Vulnerability Description
pypdf是py-pdf开源的一个免费开源的纯 python PDF 库。能够拆分、合并、裁剪和转换 PDF 文件的页面。 pypdf 6.8.0之前版本存在安全漏洞,该漏洞源于解析具有较大/Length值的PDF内容流时内存使用不当,可能导致内存消耗过大。
CVSS Information
N/A
Vulnerability Type
N/A