https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 11:18:43 +0000 https://cve.radiocsirt.org/vuln/cve-2026-77220 <p><strong>Affected:</strong> michaelrsweet pdfio</p> <p>PDFio before 1.6.5 contains a dangling pointer vulnerability in the dictionary string-formatting function that stores a pointer to a stack-local buffer in the document dictionary without copying the string value. In multi-threaded or pooled-request environments, attackers or concurrent users can trigger stack memory reuse across requests, causing cross-tenant document content corruption by silently overwriting one caller&#39;s dictionary string values with another caller&#39;s data.</p> <p><strong>Affected:</strong> michaelrsweet pdfio</p> <p>PDFio before 1.6.5 contains a dangling pointer vulnerability in the dictionary string-formatting function that stores a pointer to a stack-local buffer in the document dictionary without copying the string value. In multi-threaded or pooled-request environments, attackers or concurrent users can trigger stack memory reuse across requests, causing cross-tenant document content corruption by silently overwriting one caller&#39;s dictionary string values with another caller&#39;s data.</p> https://cve.radiocsirt.org/vuln/cve-2026-77220