fpdf2: Exponential SVG '<use>' expansion causes CPU and memory exhaustion in 'FPDF.image()'

影響: pip:fpdf2 >= 2.5.0, < 2.8.8 → 2.8.8

fpdf2 expands SVG references by deep-copying the complete referenced graphics tree. A small SVG can use nested references to make the number of in-memory objects grow exponentially, causing excessive CPU and memory consumption during FPDF.image() processing. This was reproduced with an 895-byte SVG on fpdf2 2.8.7. Under a 128 MB process limit, the input kept the process busy for about 14 seconds before raising MemoryError. Details The issue is in fpdf2's own SVG reference handling. It does not…

在 GitHub Advisory Database 阅读

2026/10/27 23:43，GitHub Advisory Database 发布了“fpdf2: Exponential SVG '<use>' expansion causes CPU and memory exhaustion in 'FPDF.image()'”（类型：漏洞公告）。严重程度为“中危”（medium）。相关技术：Python。CVE：CVE-2026-114610。