PT-2026-34565

CVE-2026-41312

Published

2026-04-16

Updated

2026-08-14

Description by

CVSS 2.0

7.8

High

MetricsAV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.10.2

Description A flaw in the pure-python PDF library allows an attacker to craft a PDF that leads to RAM exhaustion. This occurs when accessing a stream compressed using '/FlateDecode' with a /Predictor unequal to 1 and large predictor parameters.

Recommendations Update to version 6.10.2. As a temporary workaround, apply the changes from the patch manually.

Exploitability

Exploit

Fix

Impacts

Researchers

L3B4Nk4

Vendors

Affected products

Weakness enumeration

CWE-789: Memory Allocation with Excessive Size Value

Related identifiers