PY
Product
Pypdf
52
CVEs
0
On KEV
7.5
Max CVSS
8
New 30D
Severity mix
Critical 0High 17Medium 29Low 6
Watch
Add Pypdf to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-103000 | 7.5 | Sep 30 | pypdf: Possible large memory usage when retrieving alphabetical page labels Affected: before 6.19.0 |
| CVE-2026-102999 | 7.5 | Sep 30 | pypdf: Possible long runtimes with large amount of embedded files Affected: before 6.19.0 |
| CVE-2026-102998 | 7.5 | Sep 30 | pypdf: Possible long runtimes when generating appearance streams Affected: before 6.19.0 |
| CVE-2026-102997 | 7.5 | Sep 30 | pypdf: Possible long runtimes for partially malformed FlateDecode streams (Follow-up) Affected: before 6.18.1 |
| CVE-2026-102996 | 7.5 | Sep 30 | pypdf: Possible large memory usage when parsing font data Affected: before 6.18.1 |
| CVE-2026-102995 | 7.5 | Sep 30 | pypdf: Possible large memory usage for large /ToUnicode streams (Follow-up 2) Affected: before 6.18.1 |
| CVE-2026-102994 | 7.5 | Sep 30 | pypdf: Possible long runtimes/large memory usage when parsing indirect objects Affected: before 6.18.0 |
| CVE-2026-102993 | 7.5 | Sep 30 | pypdf: Possible large memory usage when retrieving Roman page labels Affected: before 6.17.0 |
| CVE-2026-59936 | 7.5 | Jul 8 | pypdf: Possible infinite loop for not terminated inline images Affected: before 6.14.1 |
| CVE-2026-59935 | 7.5 | Jul 8 | pypdf: Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filter) Affected: before 6.14.2 |
| CVE-2026-59937 | 7.5 | Jul 8 | pypdf: Possible long runtimes for repeated malformed cross-reference entries Affected: before 6.14.0 |
| CVE-2026-33699 | 7.5 | Mar 26 | pypdf: Possible infinite loop during recovery attempts in DictionaryObject.read_from_stream Affected: before 6.9.2 |
| CVE-2026-27888 | 7.5 | Feb 26 | pypdf: Manipulated FlateDecode XFA streams can exhaust RAM Affected: before 6.7.3 |
| CVE-2026-27628 | 7.5 | Feb 25 | pypdf has a possible infinite loop when loading circular /Prev entries in cross-reference streams Affected: before 6.7.2 |
| CVE-2025-62708 | 7.5 | Oct 22 | pypdf manipulated LZWDecode streams can exhaust RAM Affected: before 6.1.3 |
| CVE-2025-62707 | 7.5 | Oct 22 | pypdf affected by possible infinite loop when reading DCT inline images without EOF marker Affected: before 6.1.3 |
| CVE-2025-55197 | 7.5 | Aug 13 | pypdf's Manipulated FlateDecode streams can exhaust RAM Affected: before 6.0.0 |
| CVE-2026-57204 | 6.5 | Jun 30 | pypdf: Missing stream length values ignore defined limits Affected: before 6.13.3 |
| CVE-2026-41314 | 6.5 | Apr 22 | pypdf: Manipulated FlateDecode image dimensions can exhaust RAM Affected: before 6.10.2 |
| CVE-2026-41313 | 6.5 | Apr 22 | pypdf: Possible long runtimes for wrong size values in incremental mode Affected: before 6.10.2 |
| CVE-2026-41312 | 6.5 | Apr 22 | pypdf: Manipulated FlateDecode predictor parameters can exhaust RAM Affected: before 6.10.2 |
| CVE-2026-33123 | 6.5 | Mar 20 | pypdf has inefficient decoding of array-based streams Affected: before 6.9.1 |
| CVE-2023-36810 | 6.5 | Jun 30 | pypdf is a pure-python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files Affected: through 1.27.8 |
| CVE-2023-36807 | 6.5 | Jun 30 | pypdf is a pure-python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files Affected: 2.10.5 |
| CVE-2026-84309 | 5.5 | Sep 1 | pypdf: Possible infinite loop for TreeObject.insert_child Affected: before 6.16.0 |
| CVE-2026-54651 | 5.5 | Jun 22 | pypdf: Possible infinite loop when processing threads/articles in writer Affected: before 6.13.1 |
| CVE-2026-49461 | 5.5 | Jun 22 | pypdf: Possible large memory usage for form XObjects during text extraction Affected: before 6.12.2 |
| CVE-2026-54531 | 5.5 | Jun 22 | pypdf: Possible infinite loop when processing outlines/bookmarks in writer Affected: before 6.13.0 |
| CVE-2026-54530 | 5.5 | Jun 22 | pypdf: Possible infinite loop when retrieving fonts for layout-mode text extraction Affected: before 6.13.0 |
| CVE-2026-48155 | 5.5 | May 28 | pypdf: Possible large memory usage for large offsets for layout mode text Affected: before 6.12.0 |
| CVE-2026-48735 | 5.5 | May 28 | pypdf: Manipulated XMP metadata streams can exhaust RAM Affected: before 6.12.1 |
| CVE-2026-31826 | 5.5 | Mar 10 | pypdf: manipulated stream length values can exhaust RAM Affected: before 6.8.0 |
| CVE-2026-27026 | 5.5 | Feb 20 | pypdf possibly has long runtimes for malformed FlateDecode streams Affected: before 6.7.1 |
| CVE-2026-27025 | 5.5 | Feb 20 | pypdf has possible long runtimes/large memory usage for large /ToUnicode streams Affected: before 6.7.1 |
| CVE-2026-27024 | 5.5 | Feb 20 | pypdf has a possible infinite loop when processing TreeObject Affected: before 6.7.1 |
| CVE-2023-46250 | 5.5 | Oct 31 | pypdf is a free and open-source pure-python PDF library Affected: 3.7.0 before 3.17.0 |
| CVE-2023-36464 | 5.5 | Jun 27 | pypdf is an open source, pure-python PDF library Affected: before 3.9.0 |
| CVE-2026-82398 | 5.3 | Aug 31 | pypdf: Inefficient handling of non-whitespace inputs in read_until_whitespace Affected: before 6.15.0 |
| CVE-2026-59938 | 5.3 | Jul 8 | pypdf: Possible large memory usage for wrong image dimensions Affected: before 6.14.0 |
| CVE-2026-41168 | 5.3 | Apr 22 | pypdf has possible long runtimes for wrong size values in cross-reference and object streams Affected: before 6.10.1 |
| CVE-2026-40260 | 5.3 | Apr 16 | pypdf: Manipulated XMP metadata entity declarations can exhaust RAM Affected: before 6.10.0 |
| CVE-2026-28804 | 5.3 | Mar 6 | pypdf: Inefficient decoding of ASCIIHexDecode streams Affected: before 6.7.5 |
| CVE-2026-28351 | 5.3 | Feb 27 | Manipulated RunLengthDecode streams can exhaust RAM Affected: before 6.7.4 |
| CVE-2026-22691 | 5.3 | Jan 10 | pypdf has possible long runtimes for malformed startxref Affected: before 6.6.0 |
| CVE-2026-22690 | 5.3 | Jan 10 | pypdf has possible long runtimes for missing /Root object with large /Size values Affected: before 6.6.0 |
| CVE-2026-24688 | 4.3 | Jan 27 | pypdf has possible Infinite Loop when processing outlines/bookmarks Affected: before 6.6.2 |
| CVE-2026-84311 | 3.3 | Sep 1 | pypdf: Possible long runtimes/large memory usage when extracting XForm objects Affected: before 6.16.1 |
| CVE-2026-84310 | 3.3 | Sep 1 | pypdf: Possible long runtimes/large memory usage when retrieving outlines Affected: before 6.16.1 |
| CVE-2026-71870 | 3.3 | Aug 7 | pypdf: Possible large memory usage for large /ToUnicode streams Affected: before 6.15.0 |
| CVE-2026-71852 | 3.3 | Aug 7 | pypdf: Possible long runtimes/large memory usage for large CID font width ranges Affected: before 6.15.0 |
