CVE-2026-105747

Katalog CVE

CVSS 4.3 · Medium EPSS 0,23%

Kerentanan Improper Handling of Highly Compressed Data (Data Amplification) pada docling. Skor CVSS 3.1 4.3 (Medium) menurut github.com.

Deskripsi (NVD)

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.45.0 until 2.131.0, METS-GBS format detection in docling/datamodel/document.py and the backend in docling/backend/mets_gbs_backend.py call tarfile.TarFile.getmembers() before enforcing the max_member_count limit, causing the full archive member list to be allocated before the limit can stop processing. A small gzip-compressed tar archive with a very large number of empty members can therefore consume memory proportional to the declared member count, including during format detection before the allowed_formats restriction is applied. This issue is a residual weakness in the member-count protection added for CVE-2026-44018. This issue is fixed in 2.131.0.

Rincian

Terbit di NVD

5 Oktober 2026

Terakhir diubah

7 Oktober 2026

Status NVD

Analyzed

CVSS 3.1

4.3 (Medium), sumber github.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-409: Improper Handling of Highly Compressed Data (Data Amplification)
CWE-770: Allocation of Resources Without Limits or Throttling

EPSS (30 hari)

0,23% peluang dieksploitasi; lebih tinggi dari 12,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/docling-project/docling/security/advisories/GHSA-3cr3-8m4c-fpxw patch · advisory vendor
• https://github.com/docling-project/docling/commit/ebae65cd71c37c88b36185b406a449b92d8f7ffa patch
• https://github.com/docling-project/docling/pull/4412 issue tracking · patch
• https://github.com/docling-project/docling/releases/tag/v2.131.0 release notes