PT-2026-26191

CVE-2026-33123

Published

2026-01-01

Updated

2026-08-14

Description by

CVSS 2.0

7.8

High

MetricsAV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.9.1

Description pypdf is a free and open-source pure-python PDF library. Versions prior to 6.9.1 allow an attacker to create a malicious PDF that can cause prolonged runtimes and/or significant memory usage. Exploitation requires accessing an array-based stream containing numerous entries. The issue has been addressed in version 6.9.1.

Recommendations Upgrade to pypdf version 6.9.1 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-407: Inefficient Algorithmic Complexity

CWE-400: Uncontrolled Resource Consumption

Related identifiers