CVEvulnerability

CVE-2026-115580

7.1 HIGH Published 2026-10-23 Modified 2026-10-26 Official page ↗

Status: Awaiting Analysis
Published: 2026-10-23
Last modified: 2026-10-26
Assigner: [email protected]
CVSS 4.0 ([email protected]): 7.1 HIGH — CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weaknesses: CWE-834

Description

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.2, an attacker can craft a PDF with a standard cross-reference table whose declared entry count exceeds what the file can contain, causing excessive processing and long runtimes when the file is opened. This issue is fixed in version 6.21.2.

Weakness · CWE (1)

CWE-834 Excessive Iteration weakness

References

https://github.com/py-pdf/pypdf/commit/a3061e34b169d34478d520f5f049c53cfb1482b2 github.com
https://github.com/py-pdf/pypdf/pull/4239 github.com
https://github.com/py-pdf/pypdf/releases/tag/6.21.2 github.com
https://github.com/py-pdf/pypdf/security/advisories/GHSA-gmh7-3g9r-mjh5 github.com

CVE-2026-115580

Description

Related

Weakness · CWE (1)

References