[CVE-2026-59937] pypdf is a free and open-source pure-python PDF library. Prior to 6.14.0, an attacker can craft a PD…

Descripción técnica

pypdf is a free and open-source pure-python PDF library. Prior to 6.14.0, an attacker can craft a PDF with repeated malformed cross-reference streams that cause pypdf to spend long runtimes recovering broken cross-reference table entries. This issue is fixed in version 6.14.0.

Puntuación CVSS

Score: 7.5/10 — Severidad: HIGH — Estado NIST: Analyzed

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Productos afectados

Pypdf — Pypdf project

Debilidades (CWE)

CWE-400

Fuente oficial

Publicado en NIST NVD.