CVE-2026-59936

A flaw was found in pypdf, a pure-Python PDF library. A remote attacker can craft a malicious PDF document containing an unterminated inline image within its page content stream. When a user processes this crafted PDF, such as during text extraction, the vulnerability causes an infinite loop,...

CVE-2026-59935: Loop with Unreachable Exit Condition

pypdf is a free and open-source pure-python PDF library. Prior to 6.14.2, an attacker can craft a PDF with a page content stream containing a not terminated inline image that uses the ASCII85 or ASCIIHex filters, causing an infinite loop during parsing such as when extracting page text. This issu...

PT-2025-43414

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.1.3 Description An attacker can create a malicious PDF file that causes excessive memory consumption when processed. This occurs when parsing the content stream of a page utilizing the LZWDecode filter. Recommendation...