fpdf2: Exponential SVG '<use>' expansion causes CPU and memory exhaustion in 'FPDF.image()'

影響: pip:fpdf2 >= 2.5.0, < 2.8.8 → 2.8.8

fpdf2 expands SVG references by deep-copying the complete referenced graphics tree. A small SVG can use nested references to make the number of in-memory objects grow exponentially, causing excessive CPU and memory consumption during FPDF.image() processing. This was reproduced with an 895-byte SVG on fpdf2 2.8.7. Under a 128 MB process limit, the input kept the process busy for about 14 seconds before raising MemoryError. Details The issue is in fpdf2's own SVG reference handling. It does not…

Read on GitHub Advisory Database

On 10/27/2026, 11:43 PM, GitHub Advisory Database published "fpdf2: Exponential SVG '<use>' expansion causes CPU and memory exhaustion in 'FPDF.image()'" (type: Advisory). Severity is "Medium" (medium). Related technologies: Python. CVE: CVE-2026-114610.