CVE-2026-44019

{
  "id": "CVE-2026-44019",
  "sourceIdentifier": "[email protected]",
  "published": "2026-07-16T21:17:20.917",
  "lastModified": "2026-10-24T20:10:00.137",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Docling Core defines core data types and transformations for the document processing application Docling. In versions 2.5.0 and above, prior to 2.74.1, docling-core could allow local file:// image references and accepted inline data: content without a decoded-size limit. In applications that accept untrusted image references, this may allow access to local files readable by the process or excessive memory use from large inline payloads. This issue has been fixed in version 2.74.1."
    },
    {
      "lang": "es",
      "value": "Docling Core define los tipos de datos centrales y las transformaciones para la aplicación de procesamiento de documentos Docling. En las versiones 2.5.0 y superiores, anteriores a la 2.74.1, docling-core podía permitir referencias de imagen locales file: // y aceptaba contenido data: en línea sin un límite de tamaño decodificado. En aplicaciones que aceptan referencias de imagen no confiables, esto puede permitir el acceso a archivos locales legibles por el proceso o un uso excesivo de memoria debido a grandes cargas útiles en línea. Este problema ha sido solucionado en la versión 2.74.1."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "docling-project",
          "product": "docling-core",
          "versions": [
            {
              "version": ">= 2.5.0, < 2.74.1",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
          "baseScore": 8.1,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "REQUIRED",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 5.2
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-07-17T17:50:27.693934Z",
          "id": "CVE-2026-44019",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-73"
        },
        {
          "lang": "en",
          "value": "CWE-400"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/docling-project/docling-core/releases/tag/v2.74.1",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/docling-project/docling-core/security/advisories/GHSA-j5xp-7m2f-49jv",
      "source": "[email protected]"
    }
  ]
}