Py-pdf vulnerabilities
74 CVEs and advisories name Py-pdf as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-27025pypdf has possible long runtimes/large memory usage for large /ToUnicode streams
- CVE-2026-27024pypdf has a possible infinite loop when processing TreeObject
- CVE-2026-24688pypdf has possible Infinite Loop when processing outlines/bookmarks
- CVE-2026-22691pypdf has possible long runtimes for malformed startxref
- CVE-2026-22690pypdf has possible long runtimes for missing /Root object with large /Size values
- CVE-2025-66019pypdf manipulated LZWDecode streams can exhaust RAM
- CVE-2025-62708pypdf manipulated LZWDecode streams can exhaust RAM
- CVE-2025-62707pypdf affected by possible infinite loop when reading DCT inline images without EOF marker
- CVE-2025-55197pypdf's Manipulated FlateDecode streams can exhaust RAM
- CVE-2023-46250pypdf possible Infinite Loop when PdfWriter(clone_from) is used with a PDF
- CVE-2023-36810Quadratic runtime with malformed PDF missing xref marker in pypdf
- CVE-2023-36807Infinite Loop when reading malformed objects in pypdf
- CVE-2023-36464Infinite Loop when a comment isn't followed by a character in pypdf
- CVE-2022-24859Manipulated inline images can cause Infinite Loop in PyPDF2