## fpdf2: Exponential SVG '<use>' expansion causes CPU and memory exhaustion in 'FPDF.image()'

- 種別: advisory
- 重大度: medium
- 関連技術: python
- CVE: CVE-2026-114610
- 公開日時: 2026-10-27T14:43:19.000Z
- 情報源: GitHub Advisory Database (https://github.com/advisories/GHSA-wqw6-wpr3-45rh)
- パーマリンク: https://vulnpulse.app/items/ghsa-ghsa-wqw6-wpr3-45rh

影響: pip:fpdf2 >= 2.5.0, < 2.8.8 → 2.8.8
fpdf2 expands SVG references by deep-copying the complete referenced graphics tree. A small SVG can use nested references to make the number of in-memory objects grow exponentially, causing excessive CPU and memory consumption during FPDF.image() processing. This was reproduced with an 895-byte SVG on fpdf2 2.8.7. Under a 128 MB process limit, the input kept the process busy for about 14 seconds before raising MemoryError. Details The issue is in fpdf2's own SVG reference handling. It does not…