VendorsPy-pdfpypdfall versions

Vulnerabilities

Py-pdf Pypdf

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

66CVEs

pypdf: Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filter)

Published 2026-07-08 · Analyzed

8.7EPSS 0.006

pypdf: Possible infinite loop for not terminated inline images

Published 2026-07-08 · Analyzed

8.7EPSS 0.006

CVE-2026-103000

pypdf: Possible large memory usage when retrieving alphabetical page labels

Published 2026-09-30 · Analyzed

8.7EPSS 0.004

CVE-2026-102999

pypdf: Possible long runtimes with large amount of embedded files

Published 2026-09-30 · Analyzed

8.7EPSS 0.003

CVE-2026-102993

pypdf: Possible large memory usage when retrieving Roman page labels

Published 2026-09-30 · Analyzed

8.7EPSS 0.003

CVE-2026-102994

pypdf: Possible long runtimes/large memory usage when parsing indirect objects

Published 2026-09-30 · Analyzed

8.7EPSS 0.003

CVE-2026-102995

pypdf: Possible large memory usage for large /ToUnicode streams (Follow-up 2)

Published 2026-09-30 · Analyzed

8.7EPSS 0.003

CVE-2026-102996

pypdf: Possible large memory usage when parsing font data

Published 2026-09-30 · Analyzed

8.7EPSS 0.003

CVE-2026-102997

pypdf: Possible long runtimes for partially malformed FlateDecode streams (Follow-up)

Published 2026-09-30 · Analyzed

8.7EPSS 0.003

CVE-2026-102998

pypdf: Possible long runtimes when generating appearance streams

Published 2026-09-30 · Analyzed

8.7EPSS 0.003

pypdf: Possible long runtimes for repeated malformed cross-reference entries

Published 2026-07-08 · Analyzed

7.5EPSS 0.006

pypdf's Manipulated FlateDecode streams can exhaust RAM

Published 2025-08-13 · Analyzed

7.5EPSS 0.005

pypdf: Possible infinite loop during recovery attempts in DictionaryObject.read_from_stream

Published 2026-03-26 · Analyzed

7.5EPSS 0.005

pypdf affected by possible infinite loop when reading DCT inline images without EOF marker

Published 2025-10-22 · Analyzed

7.5EPSS 0.004

pypdf manipulated LZWDecode streams can exhaust RAM

Published 2025-10-22 · Analyzed

7.5EPSS 0.004

pypdf: Manipulated FlateDecode XFA streams can exhaust RAM

Published 2026-02-26 · Analyzed

7.5EPSS 0.004

pypdf has a possible infinite loop when loading circular /Prev entries in cross-reference streams

Published 2026-02-25 · Modified

7.5EPSS 0.004

CVE-2026-119209

pypdf: Possible large memory usage when parsing cross-reference streams

Published 2026-10-29 · Analyzed

7.1EPSS 0.003

CVE-2026-119203

pypdf: Possible infinite loop when hitting EOF in standard xref table during trailer search

Published 2026-10-29 · Analyzed

7.1EPSS 0.002

CVE-2026-119204

pypdf: Possible large memory usage when parsing page tree

Published 2026-10-29 · Analyzed

7.1EPSS 0.002

CVE-2026-119205

pypdf: Possible infinite loop when cloning dictionaries

Published 2026-10-29 · Analyzed

7.1EPSS 0.002

CVE-2026-119206

pypdf: Possible long runtimes when retrieving page labels

Published 2026-10-29 · Analyzed

7.1EPSS 0.002

CVE-2026-119207

pypdf: Possible large memory usage for exceptions in strict mode

Published 2026-10-29 · Analyzed

7.1EPSS 0.002

CVE-2026-119208

pypdf: Possible long runtimes/large memory usage for encrypted PDF files

Published 2026-10-29 · Analyzed

7.1EPSS 0.002

pypdf: Inefficient handling of non-whitespace inputs in read_until_whitespace

Published 2026-08-31 · Analyzed

6.9EPSS 0.005

pypdf: Possible large memory usage for wrong image dimensions

Published 2026-07-08 · Analyzed

6.9EPSS 0.005

Manipulated RunLengthDecode streams can exhaust RAM

Published 2026-02-27 · Analyzed

6.9EPSS 0.005

pypdf: Inefficient decoding of ASCIIHexDecode streams

Published 2026-03-06 · Analyzed

6.9EPSS 0.004

pypdf: Manipulated XMP metadata entity declarations can exhaust RAM

Published 2026-04-16 · Analyzed

6.9EPSS 0.004

pypdf: Missing stream length values ignore defined limits

Published 2026-06-30 · Analyzed

6.9EPSS 0.004

pypdf has possible long runtimes for wrong size values in cross-reference and object streams

Published 2026-04-22 · Analyzed

6.9EPSS 0.003

pypdf has a possible infinite loop when processing TreeObject

Published 2026-02-20 · Analyzed

6.9EPSS 0.002

pypdf has possible long runtimes/large memory usage for large /ToUnicode streams

Published 2026-02-20 · Analyzed

6.9EPSS 0.002

pypdf possibly has long runtimes for malformed FlateDecode streams

Published 2026-02-20 · Analyzed

6.9EPSS 0.002

pypdf: Possible infinite loop for TreeObject.insert_child

Published 2026-09-01 · Analyzed

6.9EPSS 0.002

pypdf: Possible large memory usage for form XObjects during text extraction

Published 2026-06-22 · Analyzed

6.9EPSS 0.002

pypdf: Possible infinite loop when retrieving fonts for layout-mode text extraction

Published 2026-06-22 · Analyzed

6.9EPSS 0.002

pypdf: Possible infinite loop when processing outlines/bookmarks in writer

Published 2026-06-22 · Analyzed

6.9EPSS 0.002

pypdf: Possible infinite loop when processing threads/articles in writer

Published 2026-06-22 · Analyzed

6.9EPSS 0.002

pypdf: Manipulated XMP metadata streams can exhaust RAM

Published 2026-05-28 · Analyzed

6.9EPSS 0.001