DEBIAN-CVE-2026-113789

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can craft a PDF that causes large memory usage or long runtimes when an application retrieves the document's form fields. This issue is fixed in version 6.21.0...

EUVD-2026-107327

pypdf: Possible long runtimes/large memory usage when retrieving form fields...

pypdf: Possible long runtimes/large memory usage when retrieving form fields

Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage and/or long runtimes. This requires retrieving the form fields of a document. Patches This has been fixed in pypdf==6.21.0. Workarounds If you cannot upgrade yet, consider applying the changes from PR...

GHSA-6VVC-X485-93V7 pypdf: Possible long runtimes/large memory usage when retrieving form fields

Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage and/or long runtimes. This requires retrieving the form fields of a document. Patches This has been fixed in pypdf==6.21.0. Workarounds If you cannot upgrade yet, consider applying the changes from PR...

pypdf: Possible large memory usage when parsing arrays and dictionaries

Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing arrays and/or dictionaries with lots of elements. Patches This has been fixed in pypdf==6.21.0. Workarounds If you cannot upgrade yet, consider applying the changes from PR 4218...

GHSA-F54X-CMQ8-QG57 pypdf: Possible large memory usage when parsing arrays and dictionaries

Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing arrays and/or dictionaries with lots of elements. Patches This has been fixed in pypdf==6.21.0. Workarounds If you cannot upgrade yet, consider applying the changes from PR 4218...

GHSA-CGF9-327M-V77C pypdf: Possible large memory usage when parsing content streams

Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing content streams with many small operations. Patches This has been fixed in pypdf==6.21.0. Workarounds If you cannot upgrade yet, consider applying the changes from PR 4218...

pypdf: Possible large memory usage when parsing content streams

Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing content streams with many small operations. Patches This has been fixed in pypdf==6.21.0. Workarounds If you cannot upgrade yet, consider applying the changes from PR 4218...

SUSE CVE-2026-113789

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can craft a PDF that causes large memory usage or long runtimes when an application retrieves the document's form fields. This issue is fixed in version 6.21.0...

SUSE CVE-2026-19630

In a BIND resolver, inbound DNS protocol messages with a particular structure will result in additional processing, with no limit imposed by BIND. A DNS message with a maliciously large number of such structures will cause BIND to consume disproportionate amounts of CPU time and memory during...

CVE-2026-113789

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can craft a PDF that causes large memory usage or long runtimes when an application retrieves the document's form fields. This issue is fixed in version 6.21.0...

CVE-2026-113791 pypdf: Possible large memory usage when parsing content streams

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can craft a PDF containing a content stream with many small operations, causing parsing to consume large amounts of memory. This issue is fixed in version 6.21.0...

CVE-2026-113791

The pypdf pure-python PDF library is vulnerable to uncontrolled resource consumption (CWE-400, CWE-770) in versions prior to 6.21.0 . An attacker can craft a malicious PDF file containing a content stream with numerous small operations, which forces the parser to consume excessive amounts of memo...

CVE-2026-113790

The pypdf pure-python PDF library is vulnerable to uncontrolled resource consumption prior to version 6.21.0 . An attacker can craft a malicious PDF containing arrays or dictionaries with a large number of elements, which causes the library to consume excessive amounts of memory during parsing. T...

CVE-2026-113790 pypdf: Possible large memory usage when parsing arrays and dictionaries

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can craft a PDF containing arrays or dictionaries with many elements, causing parsing to consume large amounts of memory. This issue is fixed in version 6.21.0...

CVE-2026-113789

The pypdf pure-python PDF library is vulnerable to uncontrolled resource consumption (CWE-400, CWE-407) in versions prior to 6.21.0 . An attacker can craft a malicious PDF file that triggers large memory usage or long runtimes when an application attempts to retrieve the document's form fields . ...

CVE-2026-113789

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can craft a PDF that causes large memory usage or long runtimes when an application retrieves the document's form fields. This issue is fixed in version 6.21.0...

CVE-2026-113789 pypdf: Possible long runtimes/large memory usage when retrieving form fields

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can craft a PDF that causes large memory usage or long runtimes when an application retrieves the document's form fields. This issue is fixed in version 6.21.0...

CVE-2026-19630

The BIND resolver is vulnerable to an amplified resource exhaustion attack due to how it handles inbound DNS protocol messages. Specifically, messages with a particular structure trigger additional processing without imposed limits. A maliciously crafted message containing a large number of these...

CVE-2026-19630 Amplified resource exhaustion in inbound message processing

In a BIND resolver, inbound DNS protocol messages with a particular structure will result in additional processing, with no limit imposed by BIND. A DNS message with a maliciously large number of such structures will cause BIND to consume disproportionate amounts of CPU time and memory during...