PT-2026-59639

Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing the content stream using the RunLengthDecode filter. Patches This has been fixed in pypdf==6.7.4. Workarounds If you cannot upgrade yet, consider applying the changes from PR 36...

EUVD-2026-9070

pypdf: Manipulated RunLengthDecode streams can exhaust RAM...