[CVE-2026-59936] pypdf is a free and open-source pure-python PDF library. Prior to 6.14.1, an attacker can craft a PD…

Descripción técnica

pypdf is a free and open-source pure-python PDF library. Prior to 6.14.1, an attacker can craft a PDF with a page content stream containing a not terminated inline image, causing an infinite loop during inline image end marker detection such as when extracting page text. This issue is fixed in version 6.14.1.

Puntuación CVSS

Score: 7.5/10 — Severidad: HIGH — Estado NIST: Analyzed

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Productos afectados

Pypdf — Pypdf project

Debilidades (CWE)

CWE-400

Fuente oficial

Publicado en NIST NVD.