PT-2026-132826

CVE-2026-119204

Published

2026-10-28

Updated

2026-11-02

Description by

CVSS 4.0

7.1

High

MetricsAV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.21.4

Description The library can consume excessive memory when parsing a specially crafted PDF page tree that contains numerous shared resources. This occurs because page-tree flattening copies page dictionary and inherited resource entries without a document-wide entry budget, which allows the crafted resource structure to trigger disproportionate memory allocations.

Recommendations Update to version 6.21.4.

Exploitability

Exploit

Fix

Impacts

Researchers

Smaeljaish771

Vendors

Affected products

Weakness enumeration

CWE-400: Uncontrolled Resource Consumption

Related identifiers