PP
Vendor
Pypdf Project
52
CVEs
0
On KEV
8
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-103000 | PY Pypdf Pypdf Project | 7.5 | Sep 30 | pypdf: Possible large memory usage when retrieving alphabetical page labels |
| CVE-2026-102999 | PY Pypdf Pypdf Project | 7.5 | Sep 30 | pypdf: Possible long runtimes with large amount of embedded files |
| CVE-2026-102998 | PY Pypdf Pypdf Project | 7.5 | Sep 30 | pypdf: Possible long runtimes when generating appearance streams |
| CVE-2026-102997 | PY Pypdf Pypdf Project | 7.5 | Sep 30 | pypdf: Possible long runtimes for partially malformed FlateDecode streams (Follow-up) |
| CVE-2026-102996 | PY Pypdf Pypdf Project | 7.5 | Sep 30 | pypdf: Possible large memory usage when parsing font data |
| CVE-2026-102995 | PY Pypdf Pypdf Project | 7.5 | Sep 30 | pypdf: Possible large memory usage for large /ToUnicode streams (Follow-up 2) |
| CVE-2026-102994 | PY Pypdf Pypdf Project | 7.5 | Sep 30 | pypdf: Possible long runtimes/large memory usage when parsing indirect objects |
| CVE-2026-102993 | PY Pypdf Pypdf Project | 7.5 | Sep 30 | pypdf: Possible large memory usage when retrieving Roman page labels |
| CVE-2026-84311 | PY Pypdf Pypdf Project | 3.3 | Sep 1 | pypdf: Possible long runtimes/large memory usage when extracting XForm objects |
| CVE-2026-84310 | PY Pypdf Pypdf Project | 3.3 | Sep 1 | pypdf: Possible long runtimes/large memory usage when retrieving outlines |
| CVE-2026-84309 | PY Pypdf Pypdf Project | 5.5 | Sep 1 | pypdf: Possible infinite loop for TreeObject.insert_child |
| CVE-2026-82398 | PY Pypdf Pypdf Project | 5.3 | Aug 31 | pypdf: Inefficient handling of non-whitespace inputs in read_until_whitespace |
| CVE-2026-71870 | PY Pypdf Pypdf Project | 3.3 | Aug 7 | pypdf: Possible large memory usage for large /ToUnicode streams |
| CVE-2026-71852 | PY Pypdf Pypdf Project | 3.3 | Aug 7 | pypdf: Possible long runtimes/large memory usage for large CID font width ranges |
| CVE-2026-59936 | PY Pypdf Pypdf Project | 7.5 | Jul 8 | pypdf: Possible infinite loop for not terminated inline images |
| CVE-2026-59935 | PY Pypdf Pypdf Project | 7.5 | Jul 8 | pypdf: Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filter) |
| CVE-2026-59937 | PY Pypdf Pypdf Project | 7.5 | Jul 8 | pypdf: Possible long runtimes for repeated malformed cross-reference entries |
| CVE-2026-59938 | PY Pypdf Pypdf Project | 5.3 | Jul 8 | pypdf: Possible large memory usage for wrong image dimensions |
| CVE-2026-57204 | PY Pypdf Pypdf Project | 6.5 | Jun 30 | pypdf: Missing stream length values ignore defined limits |
| CVE-2026-54651 | PY Pypdf Pypdf Project | 5.5 | Jun 22 | pypdf: Possible infinite loop when processing threads/articles in writer |
| CVE-2026-49460 | PY Pypdf Pypdf Project | 3.3 | Jun 22 | pypdf: Inefficient decoding of FlateDecode PNG predictor streams |
| CVE-2026-49461 | PY Pypdf Pypdf Project | 5.5 | Jun 22 | pypdf: Possible large memory usage for form XObjects during text extraction |
| CVE-2026-54531 | PY Pypdf Pypdf Project | 5.5 | Jun 22 | pypdf: Possible infinite loop when processing outlines/bookmarks in writer |
| CVE-2026-54530 | PY Pypdf Pypdf Project | 5.5 | Jun 22 | pypdf: Possible infinite loop when retrieving fonts for layout-mode text extraction |
| CVE-2026-48155 | PY Pypdf Pypdf Project | 5.5 | May 28 | pypdf: Possible large memory usage for large offsets for layout mode text |
| CVE-2026-48156 | PY Pypdf Pypdf Project | 3.3 | May 28 | pypdf: Possible long runtimes for zero-only width values in cross-reference streams |
| CVE-2026-48735 | PY Pypdf Pypdf Project | 5.5 | May 28 | pypdf: Manipulated XMP metadata streams can exhaust RAM |
| CVE-2026-41314 | PY Pypdf Pypdf Project | 6.5 | Apr 22 | pypdf: Manipulated FlateDecode image dimensions can exhaust RAM |
| CVE-2026-41313 | PY Pypdf Pypdf Project | 6.5 | Apr 22 | pypdf: Possible long runtimes for wrong size values in incremental mode |
| CVE-2026-41312 | PY Pypdf Pypdf Project | 6.5 | Apr 22 | pypdf: Manipulated FlateDecode predictor parameters can exhaust RAM |
| CVE-2026-41168 | PY Pypdf Pypdf Project | 5.3 | Apr 22 | pypdf has possible long runtimes for wrong size values in cross-reference and object streams |
| CVE-2026-40260 | PY Pypdf Pypdf Project | 5.3 | Apr 16 | pypdf: Manipulated XMP metadata entity declarations can exhaust RAM |
| CVE-2026-33699 | PY Pypdf Pypdf Project | 7.5 | Mar 26 | pypdf: Possible infinite loop during recovery attempts in DictionaryObject.read_from_stream |
| CVE-2026-33123 | PY Pypdf Pypdf Project | 6.5 | Mar 20 | pypdf has inefficient decoding of array-based streams |
| CVE-2026-31826 | PY Pypdf Pypdf Project | 5.5 | Mar 10 | pypdf: manipulated stream length values can exhaust RAM |
| CVE-2026-28804 | PY Pypdf Pypdf Project | 5.3 | Mar 6 | pypdf: Inefficient decoding of ASCIIHexDecode streams |
| CVE-2026-28351 | PY Pypdf Pypdf Project | 5.3 | Feb 27 | Manipulated RunLengthDecode streams can exhaust RAM |
| CVE-2026-27888 | PY Pypdf Pypdf Project | 7.5 | Feb 26 | pypdf: Manipulated FlateDecode XFA streams can exhaust RAM |
| CVE-2026-27628 | PY Pypdf Pypdf Project | 7.5 | Feb 25 | pypdf has a possible infinite loop when loading circular /Prev entries in cross-reference streams |
| CVE-2026-27026 | PY Pypdf Pypdf Project | 5.5 | Feb 20 | pypdf possibly has long runtimes for malformed FlateDecode streams |
| CVE-2026-27025 | PY Pypdf Pypdf Project | 5.5 | Feb 20 | pypdf has possible long runtimes/large memory usage for large /ToUnicode streams |
| CVE-2026-27024 | PY Pypdf Pypdf Project | 5.5 | Feb 20 | pypdf has a possible infinite loop when processing TreeObject |
| CVE-2026-24688 | PY Pypdf Pypdf Project | 4.3 | Jan 27 | pypdf has possible Infinite Loop when processing outlines/bookmarks |
| CVE-2026-22691 | PY Pypdf Pypdf Project | 5.3 | Jan 10 | pypdf has possible long runtimes for malformed startxref |
| CVE-2026-22690 | PY Pypdf Pypdf Project | 5.3 | Jan 10 | pypdf has possible long runtimes for missing /Root object with large /Size values |
| CVE-2025-62708 | PY Pypdf Pypdf Project | 7.5 | Oct 22 | pypdf manipulated LZWDecode streams can exhaust RAM |
| CVE-2025-62707 | PY Pypdf Pypdf Project | 7.5 | Oct 22 | pypdf affected by possible infinite loop when reading DCT inline images without EOF marker |
| CVE-2025-55197 | PY Pypdf Pypdf Project | 7.5 | Aug 13 | pypdf's Manipulated FlateDecode streams can exhaust RAM |
| CVE-2023-46250 | PY Pypdf Pypdf Project | 5.5 | Oct 31 | pypdf is a free and open-source pure-python PDF library |
| CVE-2023-36810 | PY Pypdf Pypdf Project | 6.5 | Jun 30 | pypdf is a pure-python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files |
| CVE-2023-36807 | PY Pypdf Pypdf Project | 6.5 | Jun 30 | pypdf is a pure-python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files |
| CVE-2023-36464 | PY Pypdf Pypdf Project | 5.5 | Jun 27 | pypdf is an open source, pure-python PDF library |