CVE-2022-24859
2 advisories.
PyPI/pypdf2 CVE-2022-24859: medium 6.2, EPSS 1.32%
Manipulated inline images can cause Infinite Loop in PyPDF2
Action: Upgrade pypdf2 to 1.27.5 or later.
pip install pypdf2==1.27.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.27.5 | - |
Fixed versions
| 1.27.5 |
Sources
- osv: GHSA-xcjx-m2pj-8g79
- https://github.com/py-pdf/PyPDF2/security/advisories/GHSA-xcjx-m2pj-8g79
- https://nvd.nist.gov/vuln/detail/CVE-2022-24859
- https://github.com/py-pdf/PyPDF2/issues/329
- https://github.com/py-pdf/PyPDF2/pull/740
- https://github.com/py-pdf/PyPDF2
- https://github.com/py-pdf/PyPDF2/releases/tag/1.27.5
- https://github.com/pypa/advisory-database/tree/main/vulns/pypdf2/PYSEC-2022-194.yaml
- https://lists.debian.org/debian-lts-announce/2022/06/msg00001.html
- https://lists.debian.org/debian-lts-announce/2023/06/msg00013.html
CVE-2022-24859 · published · modified · JSON
PyPI/pypdf2 CVE-2022-24859: unknown, EPSS 1.32%
PyPDF2 is an open source python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files. In versions prior to 1.27.5 an attacker who uses this vulnerability can cr
Action: Upgrade pypdf2 to 1.27.5 or later.
pip install pypdf2==1.27.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.27.5 | - |
Fixed versions
| 1.27.5 |
Sources
- osv: PYSEC-2022-194
- https://github.com/py-pdf/PyPDF2/security/advisories/GHSA-xcjx-m2pj-8g79
- https://github.com/py-pdf/PyPDF2/pull/740
- https://github.com/py-pdf/PyPDF2/issues/329
- https://github.com/py-pdf/PyPDF2/releases/tag/1.27.5
CVE-2022-24859 · published · modified · JSON