Py-pdf vulnerabilities
74 CVEs and advisories name Py-pdf as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-119209pypdf: Possible large memory usage when parsing cross-reference streams
- CVE-2026-119208pypdf: Possible long runtimes/large memory usage for encrypted PDF files
- CVE-2026-119207pypdf: Possible large memory usage for exceptions in strict mode
- CVE-2026-119206pypdf: Possible long runtimes when retrieving page labels
- CVE-2026-119205pypdf: Possible infinite loop when cloning dictionaries
- CVE-2026-119204pypdf: Possible large memory usage when parsing page tree
- CVE-2026-119203pypdf: Possible infinite loop when hitting EOF in standard xref table during trailer search
- CVE-2026-115585pypdf: Possible long runtimes for repeated malformed cross-reference entries (Follow-up)
- CVE-2026-115580pypdf: Possible long runtimes for large xref table header limits
- CVE-2026-115572pypdf: Possible long runtimes for repeated references to the same missing object
- CVE-2026-114610fpdf2: Exponential SVG '<use>' expansion causes CPU and memory exhaustion in 'FPDF.image()'
- CVE-2026-114609fpdf2 implicitly loads external URLs and local image paths when rendering attacker-controlled content
- CVE-2026-113795pypdf: Possible large memory usage for streams with multiple filters
- CVE-2026-113794pypdf: Possible infinite loop when hitting EOF in standard xref table
- CVE-2026-113793pypdf: Possible infinite loop when removing tree items
- CVE-2026-113792pypdf: Possible infinite loop in PdfWriter.find_outline_item
- CVE-2026-113791pypdf: Possible large memory usage when parsing content streams
- CVE-2026-113790pypdf: Possible large memory usage when parsing arrays and dictionaries
- CVE-2026-113789pypdf: Possible long runtimes/large memory usage when retrieving form fields
- CVE-2026-113786pypdf: Unvalidated JPEG image data loading
- CVE-2026-103000pypdf: Possible large memory usage when retrieving alphabetical page labels
- CVE-2026-102999pypdf: Possible long runtimes with large amount of embedded files
- CVE-2026-102998pypdf: Possible long runtimes when generating appearance streams
- CVE-2026-102997pypdf: Possible long runtimes for partially malformed FlateDecode streams (Follow-up)
- CVE-2026-102996pypdf: Possible large memory usage when parsing font data
- CVE-2026-102995pypdf: Possible large memory usage for large /ToUnicode streams (Follow-up 2)
- CVE-2026-102994pypdf: Possible long runtimes/large memory usage when parsing indirect objects
- CVE-2026-102993pypdf: Possible large memory usage when retrieving Roman page labels
- CVE-2026-84311pypdf: Possible long runtimes/large memory usage when extracting XForm objects
- CVE-2026-84310pypdf: Possible long runtimes/large memory usage when retrieving outlines