Threats affecting pkg:generic/libhevc

OAuthlib contains a vulnerability in its token grant handlers where an authenticated low-privilege client can supply a different client_id in the token request body, causing grant and scope validation to be performed under that other client identity. This affects the client_credentials and password grant flows. The issue arises because OAuthlib does not require the authenticated client's client_id to match the client_id parameter in the request body before validation. This can lead to token authorization bypass, allowing issuance of tokens with unauthorized scopes or grant types.

A vulnerability in pypdf allows crafted PDF files with cross-reference streams to cause large memory usage when parsed. This can lead to resource exhaustion on systems processing such files. The issue is fixed in pypdf version 6.21.3. If upgrading is not possible, applying the changes from pull request #4269 is recommended as a workaround.

A vulnerability in pypdf (CVE-2026-119208) allows an attacker to craft an encrypted PDF file with a manipulated page count (/Count) value, causing excessive runtimes and large memory usage when the page count is accessed. This can lead to denial of service conditions. The issue affects versions of pypdf starting from 0.16.4. A fix is available in pypdf version 6.21.3.

CVE-2026-119207 is a high-severity vulnerability in pypdf that allows an attacker to craft a malicious PDF causing large memory usage when an invalid dictionary is loaded in strict mode. This can lead to resource exhaustion. The issue has been fixed in pypdf version 6.21.3. Users unable to upgrade immediately can apply the changes from the referenced pull request as a workaround.

CVE-2026-119206 is a vulnerability in pypdf that allows an attacker to craft a PDF file causing long runtimes when retrieving page labels. This can lead to performance degradation during PDF processing. The issue affects pypdf versions starting from 0.16.4. A fix is available in pypdf version 6.21.3. Users unable to upgrade immediately can apply the changes from pull request #4251 as a workaround.

A vulnerability in pypdf allows an attacker to craft a PDF that triggers an infinite loop when cloning or duplicating a DictionaryObject. This can cause denial of service by exhausting resources. The issue is fixed in pypdf version 6.21.4. Users unable to upgrade immediately can apply the changes from a specific pull request as a workaround.

A vulnerability in pypdf allows crafted PDF files with complex page trees and many shared resources to cause large memory usage during parsing. This can lead to resource exhaustion on affected systems. The issue is fixed in pypdf version 6.21.4. Users unable to upgrade immediately can apply the changes from the referenced pull request as a workaround.

A vulnerability in pypdf allows an attacker to craft a PDF file that causes an infinite loop when the file is incomplete and lacks a trailer during the standard xref table trailer search. This issue is fixed in pypdf version 6.21.4.

pyasn1 versions up to 0.6.4 contain a denial of service vulnerability in the decoding of binary-encoded ASN.1 REAL values with large mantissas. The decoding process is quadratic in the mantissa length, causing excessive CPU consumption when processing crafted inputs. This affects BER, CER, and DER decoders using the RealPayloadDecoder. The issue is fixed in pyasn1 version 0.6.5.

CVE-2026-119196 is a high-severity vulnerability in pyasn1 versions from 3.4.0 up to but not including 5.47.0. It causes quadratic CPU consumption when decoding constructed BIT STRING values with many fragments, leading to potential CPU exhaustion and denial of service. The issue affects BER and CER decoders and certain schema-driven DER decoding paths. The vulnerability arises from inefficient bit-shifting operations during decoding. A fix is available in pyasn1 version 5.47.0.

pyasn1 versions 0.6.4 and earlier contain a quadratic-time denial of service vulnerability in the decoding of constructed OCTET STRINGs, constructed character strings, and indefinite-length ANY types. The decoder repeatedly concatenates fragments inefficiently, causing CPU usage to grow quadratically with the number of fragments. This can lead to CPU exhaustion if an attacker supplies crafted ASN.1 input to an affected decoder. The vulnerability affects BER and CER decoding paths and certain non-conforming DER inputs. No confidentiality or integrity impact is reported. The issue is fixed in version 5.47.0.

CVE-2026-119194 is a high-severity vulnerability in Prowler's pyasn1 library versions >=3.4.0 and <5.47.0. It causes quadratic CPU usage when decoding attacker-controlled BER, CER, or DER data without an ASN.1 schema, potentially leading to denial of service by exhausting CPU resources. The issue arises from inefficient handling of tag sets during schemaless decoding. A fix is available in version 5.47.0.

The SimpleForm WordPress plugin up to version 3.10.2 contains an arbitrary file upload vulnerability via its handle_upload function. This flaw allows unauthenticated attackers to upload potentially executable files by bypassing extension and MIME type validation using trailing-dot filenames. The vulnerability arises from missing server-side file key allowlisting and inadequate pre-sanitization. Exploitation could lead to remote code execution. The nonce used for access control is publicly available in form shortcodes, making unauthorized exploitation trivial.

The Booking for Appointments and Events Calendar – Amelia plugin for WordPress versions up to 2.4.12 is vulnerable to sensitive information exposure via the 'page' parameter. This vulnerability allows unauthenticated attackers to access personally identifiable information of staff members, including full name, email, phone number, gender, and timezone, as well as internal notes authored by administrators for published events. The sensitive data is exposed because the raw providers array is included in the JSON response without proper filtering.