Skip to contentPy-pdf Pypdf vulnerabilities
- py-pdf pypdfpypdf: Possible infinite loop during recovery attempts in DictionaryObject.read_from_streamCVE-2026-33699Fix available4.6 Medium
- py-pdf pypdfpypdf has inefficient decoding of array-based streamsCVE-2026-33123Fix available5.1 Medium
- py-pdf pypdfpypdf: manipulated stream length values can exhaust RAMCVE-2026-31826Fix available6.8 Medium
- py-pdf pypdfpypdf: Inefficient decoding of ASCIIHexDecode streamsCVE-2026-28804Fix available6.9 Medium
- py-pdf pypdfManipulated RunLengthDecode streams can exhaust RAMCVE-2026-28351Fix available6.9 Medium
- py-pdf pypdfpypdf: Manipulated FlateDecode XFA streams can exhaust RAMCVE-2026-27888Fix available6.6 Medium
- py-pdf pypdfpypdf has a possible infinite loop when loading circular /Prev entries in cross-reference streamsCVE-2026-27628Fix available1.2 Low
- py-pdf pypdfpypdf possibly has long runtimes for malformed FlateDecode streamsCVE-2026-27026Fix available6.9 Medium
- py-pdf pypdfpypdf has possible long runtimes/large memory usage for large /ToUnicode streamsCVE-2026-27025Fix available6.9 Medium
- py-pdf pypdfpypdf has a possible infinite loop when processing TreeObjectCVE-2026-27024Fix available6.9 Medium
- py-pdf pypdfpypdf has possible Infinite Loop when processing outlines/bookmarksCVE-2026-24688Public exploitFix available5.1 Medium
- py-pdf pypdfpypdf has possible long runtimes for malformed startxrefCVE-2026-22691Fix available2.7 Low
- py-pdf pypdfpypdf has possible long runtimes for missing /Root object with large /Size valuesCVE-2026-22690Fix available2.7 Low
- py-pdf pypdfpypdf manipulated LZWDecode streams can exhaust RAMCVE-2025-66019Fix available6.6 Medium
- py-pdf pypdfpypdf manipulated LZWDecode streams can exhaust RAMCVE-2025-62708Fix available6.6 Medium
- py-pdf pypdfpypdf affected by possible infinite loop when reading DCT inline images without EOF markerCVE-2025-62707Fix available6.6 Medium
- py-pdf pypdfpypdf's Manipulated FlateDecode streams can exhaust RAMCVE-2025-55197Fix available6.6 Medium
- py-pdf pypdfpypdf possible Infinite Loop when PdfWriter(clone_from) is used with a PDFCVE-2023-46250Fix available5.1 Medium
- py-pdf pypdfQuadratic runtime with malformed PDF missing xref marker in pypdfCVE-2023-36810Fix available6.2 Medium
- py-pdf pypdfInfinite Loop when reading malformed objects in pypdfCVE-2023-36807Fix available6.2 Medium
- py-pdf pypdf, pypdf2 project pypdf2 +1 moreInfinite Loop when a comment isn't followed by a character in pypdfCVE-2023-36464Fix available6.2 Medium
- py-pdf pypdf2, debian linux +1 moreManipulated inline images can cause Infinite Loop in PyPDF2CVE-2022-24859Fix available6.2 Medium