py-pdf

7 records · 7 with a public proof-of-concept

Disclosed vulnerabilities where the NVD names py-pdf as an affected vendor, highest CVSS first.

  1. MEDIUM 5.5CVE-2026-119209public PoC2026-10-29

    pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consume excessive memory while opening a crafted PDF containing cross-reference streams that declare very large entry counts. Highly compressible streams and /Prev chains can m…

    pypdf

    AI risk analysis on Exploit-DB.ai →

  2. MEDIUM 5.5CVE-2026-119208public PoC2026-10-29

    pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consume excessive time and memory when an application accesses the page count of a crafted encrypted PDF whose page tree declares a forged /Count value. Even after successful d…

    pypdf

    AI risk analysis on Exploit-DB.ai →

  3. MEDIUM 5.5CVE-2026-119207public PoC2026-10-29

    pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consume excessive memory when strict mode loads a crafted invalid PDF dictionary. Nested parsing failures add repeated exception text to newly raised errors, allowing a small m…

    pypdf

    AI risk analysis on Exploit-DB.ai →

  4. MEDIUM 5.5CVE-2026-119206public PoC2026-10-29

    pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can take excessive time to retrieve page labels from a crafted PDF containing a flat page-label number tree with many ranges. The page_labels property resolves each page independen…

    pypdf

    AI risk analysis on Exploit-DB.ai →

  5. MEDIUM 5.5CVE-2026-119205public PoC2026-10-29

    pypdf is a free and open-source pure-python PDF library. Prior to 6.21.4, pypdf can enter an infinite loop when cloning or duplicating a crafted cyclic DictionaryObject. Clone traversal checked generated destination references rather than the original source r…

    pypdf

    AI risk analysis on Exploit-DB.ai →

  6. MEDIUM 5.5CVE-2026-119204public PoC2026-10-29

    pypdf is a free and open-source pure-python PDF library. Prior to 6.21.4, pypdf can consume excessive memory while parsing a crafted PDF page tree containing many shared resources. Page-tree flattening copies page dictionary and inherited resource entries with…

    pypdf

    AI risk analysis on Exploit-DB.ai →

  7. MEDIUM 5.5CVE-2026-119203public PoC2026-10-29

    pypdf is a free and open-source pure-python PDF library. Prior to 6.21.4, pypdf can enter an infinite loop while opening a crafted incomplete PDF whose standard cross-reference table reaches the end of the file without a trailer. The trailer search can repeate…

    pypdf

    AI risk analysis on Exploit-DB.ai →