Linux Distros Unpatched Vulnerability : CVE-2026-84310

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/doccommon.py getoutline to consume long...

CVE-2026-24688

CVE-2026-24688 - pypdf - 循環参照によるDoS脆弱性 このリポジトリには、CVE-2026-24688を発動させるための概念実証コードが含まれています。 概要 pypdfのアウトライン（ブックマーク）解析ロジックにおける重大なサービス拒否（DoS）脆弱性です。循環するアウトライン参照を含むPDFを処理すると、パーサーが無限ループに入り、メモリを継続的に割り当て続け、私のマシン（TM）では毎秒数百MBのメモリを消費し、最終的にシステム全体がクラッシュします。 これはアプリケーションのハングアップではなく、システムレベルのDoSです。 内容...

CVE-2026-84309

A flaw was found in pypdf. An attacker can craft a malicious PDF document with a cyclic tree structure. When a writing code path attempts to insert a child object, the TreeObject.insertchild function can follow /Next links indefinitely, leading to an infinite loop. This can result in a denial of...

EUVD-2026-68894

pypdf: Inefficient handling of non-whitespace inputs in readuntilwhitespace...

CVE-2026-84309

pypdf is a free and open-source pure-python PDF library. Prior to 6.16...

UBUNTU-CVE-2026-84309

pypdf is a free and open-source pure-python PDF library. Prior to 6.16...

UBUNTU-CVE-2026-84311

pypdf is a free and open-source pure-python PDF library. Prior to 6.16...

CVE-2026-84311

pypdf is a free and open-source pure-python PDF library. Prior to 6.16...

UBUNTU-CVE-2026-84310

pypdf is a free and open-source pure-python PDF library. Prior to 6.16...

CVE-2026-84310

pypdf is a free and open-source pure-python PDF library. Prior to 6.16...

pypdf: Possible long runtimes/large memory usage when retrieving outlines

Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consumption. This requires accessing the outlines of a document with either lots of entries or nested outlines with long re-used nesting paths. Patches This has been fixed in pypdf==6.16.1...

GHSA-23W6-3W8W-8484 pypdf: Possible long runtimes/large memory usage when retrieving outlines

Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consumption. This requires accessing the outlines of a document with either lots of entries or nested outlines with long re-used nesting paths. Patches This has been fixed in pypdf==6.16.1...

pypdf: Possible long runtimes/large memory usage when extracting XForm objects

Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consumption. This requires extracting the text of a page with lots of XForm objects, where some of them might be re-used. Patches This has been fixed in pypdf==6.16.1. Workarounds If you...

GHSA-763M-79HH-57F2 pypdf: Possible long runtimes/large memory usage when extracting XForm objects

Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consumption. This requires extracting the text of a page with lots of XForm objects, where some of them might be re-used. Patches This has been fixed in pypdf==6.16.1. Workarounds If you...

GHSA-JP53-MHQP-8XCG pypdf: Possible infinite loop for TreeObject.insert_child

Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires a usually writing code path where TreeObject.insertchild is involved. Patches This has been fixed in pypdf==6.16.0. Workarounds If you cannot upgrade yet, consider applying the changes fr...

pypdf: Possible infinite loop for TreeObject.insert_child

Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires a usually writing code path where TreeObject.insertchild is involved. Patches This has been fixed in pypdf==6.16.0. Workarounds If you cannot upgrade yet, consider applying the changes fr...

CVE-2026-84310

pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/doccommon.py getoutline to consume long runtimes and large amounts of memory when retrieving document outlines with large numbers of entries or deeply nested reused paths becaus...

CVE-2026-84311

pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/page.py PageObject.extracttext and PageObject.extractxformtext to traverse a directed acyclic graph of reused form XObjects in which each form invokes a child multiple times,...

DEBIAN-CVE-2026-84311

pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/page.py PageObject.extracttext and PageObject.extractxformtext to traverse a directed acyclic graph of reused form XObjects in which each form invokes a child multiple times,...

DEBIAN-CVE-2026-84310

pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/doccommon.py getoutline to consume long runtimes and large amounts of memory when retrieving document outlines with large numbers of entries or deeply nested reused paths becaus...