PT-2026-28179

CVE-2026-33699

Publicado

2026-01-01

Atualizado

2026-08-14

Descrição por

CVSS 2.0

7.8

Alta

MétricasAV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.9.2

Description pypdf is a free and open-source pure-python PDF library. A crafted PDF file can cause an infinite loop when read in non-strict mode. This issue requires reading a file in non-strict mode. Applying the changes from the patch manually is a potential workaround if upgrading is not immediately possible.

Recommendations Upgrade to version 6.9.2 or later. If an immediate upgrade is not possible, apply the changes from PR #3693 manually.

Explorabilidade

Exploit

Correção

Impactos

Pesquisadores

Kejcao

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-835: Loop with Unreachable Exit Condition (\'Infinite Loop\')

Identificadores relacionados