CVE-2026-113794

The pypdf pure-python PDF library is vulnerable to an infinite loop (CWE-835) in versions prior to 6.20.0 . An attacker can trigger this by crafting an incomplete PDF that ends prematurely inside a standard cross-reference table , causing the library to mishandle the unexpected end of file. This ...

CVE-2026-113794 pypdf: Possible infinite loop when hitting EOF in standard xref table

pypdf is a free and open-source pure-python PDF library. Prior to 6.20.0, an attacker can craft an incomplete PDF that ends inside a standard cross-reference table, causing pypdf to mishandle the unexpected end of file and enter an infinite loop. This issue is fixed in version 6.20.0...