Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-124553 1 Funstory-ai 1 Babeldoc 2026-11-08 7.5 High
BabelDOC from 0.3.61 before 0.7.0 contains a resource exhaustion vulnerability that allows remote attackers to exhaust CPU and memory by supplying unbounded bfrange and cidrange spans. Attackers can submit a crafted PDF whose embedded ToUnicode CMap declares a huge range, driving billions of loop iterations and stalling the translation worker.