CVE-2026-82398

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.15.0

Description A flaw exists where an attacker can craft a PDF file that triggers long runtimes. This occurs when the read until whitespace() function in pypdf/ utils.py processes a stream containing a long sequence of bytes without whitespace. The function performs immutable bytes concatenation within a one-byte loop, resulting in quadratic processing cost for the input.

Recommendations Update to version 6.15.0.