Search Results (6 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-113790 1 Py-pdf 1 Pypdf 2026-11-05 3.3 Low
pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can craft a PDF containing arrays or dictionaries with many elements, causing parsing to consume large amounts of memory. This issue is fixed in version 6.21.0.
CVE-2026-113791 1 Py-pdf 1 Pypdf 2026-11-05 3.3 Low
pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can craft a PDF containing a content stream with many small operations, causing parsing to consume large amounts of memory. This issue is fixed in version 6.21.0.
CVE-2026-113792 1 Py-pdf 1 Pypdf 2026-11-05 3.3 Low
pypdf is a free and open-source pure-python PDF library. Prior to 6.20.1, calling PdfWriter.find_outline_item on a crafted PDF with a cyclic outline hierarchy can enter an infinite loop and block the current process. This issue is fixed in version 6.20.1.
CVE-2026-113793 1 Py-pdf 1 Pypdf 2026-11-05 4.3 Medium
pypdf is a free and open-source pure-python PDF library. Prior to 6.20.1, removing an object from a crafted cyclic PDF tree, such as an outline item, can enter an infinite loop and block the current process. This issue is fixed in version 6.20.1.
CVE-2026-31826 1 Py-pdf 1 Pypdf 2026-11-02 5.5 Medium
pypdf is a free and open-source pure-python PDF library. Prior to 6.8.0, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing a content stream with a rather large /Length value, regardless of the actual data length inside the stream. This vulnerability is fixed in 6.8.0.
CVE-2026-33123 1 Py-pdf 1 Pypdf 2026-11-02 6.5 Medium
pypdf is a free and open-source pure-python PDF library. Versions prior to 6.9.1 allow an attacker to craft a malicious PDF which leads to long runtimes and/or large memory usage. Exploitation requires accessing an array-based stream with many entries. This issue has been fixed in version 6.9.1.