825 matches found
pypdf: Possible infinite loop for TreeObject.insert_child
ImpactAn attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires a usually writing code path where TreeObject.insertchild is involved. PatchesThis has been fixed in pypdf==6.16.0. WorkaroundsIf you cannot upgrade yet, consider applying the changes from ...
pypdf: Possible long runtimes/large memory usage when retrieving outlines
ImpactAn attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consumption. This requires accessing the outlines of a document with either lots of entries or nested outlines with long re-used nesting paths. PatchesThis has been fixed in pypdf==6.16.1...
PYSEC-2026-3913 pypdf: Possible infinite loop for TreeObject.insert_child
Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires a usually writing code path where TreeObject.insertchild is involved. Patches This has been fixed in pypdf==6.16.0. Workarounds If you cannot upgrade yet, consider applying the changes fr...
pypdf: Possible long runtimes/large memory usage when extracting XForm objects
ImpactAn attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consumption. This requires extracting the text of a page with lots of XForm objects, where some of them might be re-used. PatchesThis has been fixed in pypdf==6.16.1. WorkaroundsIf you cann...
PYSEC-2026-3911 pypdf: Possible long runtimes/large memory usage when extracting XForm objects
Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consumption. This requires extracting the text of a page with lots of XForm objects, where some of them might be re-used. Patches This has been fixed in pypdf==6.16.1. Workarounds If you...
PYSEC-2026-3910 pypdf: Possible long runtimes/large memory usage when retrieving outlines
Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consumption. This requires accessing the outlines of a document with either lots of entries or nested outlines with long re-used nesting paths. Patches This has been fixed in pypdf==6.16.1...
CVE-2026-24688
CVE-2026-24688 - pypdf - 순환 참조 DoS 취약점 이 저장소에는 CVE-2026-24688을 트리거하기 위한 개념 증명 코드가 포함되어 있습니다. 요약 pypdf의 개요북마크 파싱 로직에서 발생하는 심각한 서비스 거부DoS 취약점입니다. 순환 개요 참조가 포함된 PDF를 처리할 때 파서가 무한 루프에 빠져 메모리를 지속적으로 할당하며, 제 시스템TM 기준 초당 수백 MB의 메모리를 소비하여 결국 전체 시스템이 충돌합니다. 이는 애플리케이션 중단이 아닌 시스템 수준의 DoS입니다. 내용물...
The vulnerability of the TreeObject.insert_child() function in the Python library for working with PDF files, PyPDF, allows a hacker to cause a service failure.
The vulnerability of the TreeObject.insertchild function in the Python library for working with PDF files PyPDF is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerabilities of the functions PageObject._extract_text() and PageObject.extract_xform_text() in the Python library for working with PDF files, PyPDF, allow a hacker to cause a service failure.
The vulnerability of the functions PageObject.extracttext and PageObject.extractxformtext in the Python library for working with PDF files, PyPDF, is related to excessive iteration. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the _get_outline() function in the pypdf/_doc_common.py library of the Python library for working with PDF files, PyPDF, allows a attacker to cause a service failure.
The vulnerability of the getoutline function in the pypdf/doccommon.py library of the Python PDF handling library PyPDF is related to asymmetric resource consumption. Exploiting this vulnerability could allow an attacker to cause a service failure...
cve-2026-24688
CVE-2026-24688 - pypdf - 순환 참조 DoS 취약점 이 저장소에는 CVE-2026-24688을 트리거하기 위한 개념 증명PoC 코드가 포함되어 있습니다. 요약 pypdf의 개요책갈피 파싱 로직에서 심각한 서비스 거부DoS 취약점이 발견되었습니다. 순환 개요 참조가 포함된 PDF를 처리할 때 파서는 무한 루프에 빠져 메모리를 지속적으로 할당하며, 제 시스템TM에서는 초당 수백 MB의 메모리를 소비하다가 결국 완전한 시스템 충돌을 일으킵니다. 이는 단순한 애플리케이션 중단이 아닌, 시스템 수준의 DoS입니다. 구...
OPENSUSE-SU-2026:11726-1 python313-pypdf-6.16.2-3.1 on GA media
These are all security issues fixed in the python313-pypdf-6.16.2-3.1 package on the GA media of openSUSE Tumbleweed...
SUSE CVE-2026-84309
pypdf is a free and open-source pure-python PDF library. Prior to 6.16.0, an attacker can craft a PDF whose cyclic tree structure causes pypdf/generic/datastructures.py TreeObject.insertchild to follow /Next links indefinitely when a writing code path inserts a child, producing an infinite loop...
The vulnerability of the Python library for working with PDF files, PyPDF, relates to the execution of a loop with an unreachable exit condition, allowing a hacker to cause a service failure.
The vulnerability of the Python library for working with PDF files, PyPDF, is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux Distros Unpatched Vulnerability : CVE-2026-84310
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/doccommon.py getoutline to consume long...
Linux Distros Unpatched Vulnerability : CVE-2026-84311
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/page.py PageObject.extracttext and...
Linux Distros Unpatched Vulnerability : CVE-2026-84309
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pypdf is a free and open-source pure-python PDF library. Prior to 6.16.0, an attacker can craft a PDF whose cyclic tree structure causes...
CVE-2026-84309
A flaw was found in pypdf. An attacker can craft a malicious PDF document with a cyclic tree structure. When a writing code path attempts to insert a child object, the TreeObject.insertchild function can follow /Next links indefinitely, leading to an infinite loop. This can result in a denial of...
GHSA-FC8X-2RWW-XW9M pypdf: Inefficient handling of non-whitespace inputs in read_until_whitespace
Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires a call to readuntilwhitespace with an input which does not have whitespace for a long time. Patches This has been fixed in pypdf==6.15.0. Workarounds If you cannot upgrade yet, consider...
