PT-2026-103591

CVE-2026-103000

Published

2026-09-30

Updated

2026-10-29

Description by

CVSS 4.0

8.7

High

MetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.19.0

Description A crafted PDF file can contain unusually large alphabetical page-label values. When an application retrieves document page labels, the pypdf/ page labels.py module generates strings that exceed a reasonable length, leading to excessive memory consumption and potentially causing the application to become unavailable.

Recommendations Update to version 6.19.0.

Exploitability

Exploit

Fix

Impacts

Researchers

Manop55555

Vendors

Affected products

Weakness enumeration

CWE-400: Uncontrolled Resource Consumption

Related identifiers