PT-2026-22068
CVE-2026-27888
·
Published
2026-02-25
·
Updated
2026-08-14
Description by
CVSS 2.0
7.8
HighMetricsAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions
pypdf versions prior to 6.7.3
Description
A crafted PDF file can cause excessive RAM usage, potentially leading to exhaustion. This occurs when accessing the
xfa property of a reader or writer, specifically when the corresponding stream is compressed using /FlateDecode.Recommendations
Update to version 6.7.3 or later.
As a workaround, apply the patch manually.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾