PT-2026-44392 · Pypi+1 · Pypdf+1

·

CVE-2026-48155

·

Published

2026-04-22

·

Updated

2026-08-17

CVSS v2.0

7.8

High

VectorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.12.0
Description A flaw in the pure-python PDF library allows an attacker to craft a PDF file that causes excessive memory consumption. This occurs when extracting text in layout mode using large character offsets.
Recommendations Update to version 6.12.0.

Exploit

Fix

DoS

Resource Exhaustion

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-14102
CLEANSTART-2026-EH47852
CLEANSTART-2026-GN02455
CVE-2026-48155
ECHO-3326-0933-380B
GHSA-CJ93-CHG6-VGV8
OPENSUSE-SU-2026:10974-1
PYSEC-2026-3016

Affected Products

Red Os
Pypdf