Tag
#pypdf
blogHIGH 7.1
Understanding the pypdf Memory Consumption Vulnerability (CVE-2026-119204)
This educational analysis covers the pypdf vulnerability (CVE-2026-119204) that can lead to large memory usage when parsing a specifically crafted PDF. The vulnerability has a CVSS score of 7.1 and is categorized under CWE-400: Uncontrolled Resource Consumption. It has been patched in pypdf version 6.21.4.
newsHIGH 7.1
pypdf Infinite Loop Vulnerability (CVE-2026-119203)
A vulnerability in pypdf can lead to an infinite loop when processing a crafted PDF file without a trailer, allowing an attacker to cause a denial-of-service (DoS). The vulnerability has a CVSS score of 7.1 and is fixed in pypdf version 6.21.4. Affected users should update to the latest version to mitigate the risk.