PT-2026-26191
CVE-2026-33123
·
Publicado
2026-01-01
·
Atualizado
2026-08-14
Descrição por
CVSS 2.0
7.8
AltaMétricasAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions
pypdf versions prior to 6.9.1
Description
pypdf is a free and open-source pure-python PDF library. Versions prior to 6.9.1 allow an attacker to create a malicious PDF that can cause prolonged runtimes and/or significant memory usage. Exploitation requires accessing an array-based stream containing numerous entries. The issue has been addressed in version 6.9.1.
Recommendations
Upgrade to pypdf version 6.9.1 or later.
Explorabilidade
Exploit
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾