PT-2026-34566

CVE-2026-41313

·

Published

2026-04-16

·

Updated

2026-08-14

Description by

CVSS 2.0
7.8
High
MetricsAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.10.2
Description A flaw in the pure-python PDF library allows an attacker to craft a PDF that causes long runtimes. This occurs when loading a PDF in incremental mode that contains a large /Size value in the trailer.
Recommendations Update to version 6.10.2. Apply the changes from the patch manually as a workaround.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
GHSA-4PXV-J86V-MHCW
ECHO-D728-FDC6-1A1E
PYSEC-2026-3007
Found an issue in the description? Have something to add? Feel free to write us 👾