PT-2026-4845
CVE-2026-24688
·
Published
2026-01-01
·
Updated
2026-08-14
Description by
CVSS 4.0
5.1
MediumMetricsAV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
pypdf versions prior to 6.6.2
Description
A flaw exists in the
pypdf library that allows attackers to trigger an infinite loop by creating a PDF file with cyclic outline references. This requires accessing the outlines or bookmarks within the PDF.Recommendations
Upgrade to pypdf version 6.6.2 or later.
If upgrading is not immediately possible, apply the changes from Pull Request #3610.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾