Pypdf Project
Pypdf Project Pypdf: vulnerabilidades y CVE
Pypdf Project Pypdf tiene 39 vulnerabilidades publicadas, 34 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE39
Últimos 12 meses34
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-102993 | Alta (8.7) | 0.30% | — | 30 sept 2026 | pypdf is a free and open-source pure-python PDF library. Prior to 6.17.0, a crafted PDF can provide unusually large Roman page-label values that cause pypdf/_page_labels.py to generate excessively large numeral strings… |
| CVE-2026-59936 | Alta (8.7) | 0.62% | — | 8 jul 2026 | pypdf is a free and open-source pure-python PDF library. Prior to 6.14.1, an attacker can craft a PDF with a page content stream containing a not terminated inline image, causing an infinite loop during inline image end… |
| CVE-2026-59935 | Alta (8.7) | 0.62% | — | 8 jul 2026 | pypdf is a free and open-source pure-python PDF library. Prior to 6.14.2, an attacker can craft a PDF with a page content stream containing a not terminated inline image that uses the ASCII85 or ASCIIHex filters,… |
| CVE-2026-59938 | Media (6.9) | 0.52% | — | 8 jul 2026 | pypdf is a free and open-source pure-python PDF library. Prior to 6.14.0, an attacker can craft a PDF with declared image size values that are much too large compared to the actual data, causing large memory usage in… |
| CVE-2026-59937 | Media (6.9) | 0.62% | — | 8 jul 2026 | pypdf is a free and open-source pure-python PDF library. Prior to 6.14.0, an attacker can craft a PDF with repeated malformed cross-reference streams that cause pypdf to spend long runtimes recovering broken… |
| CVE-2026-57204 | Media (6.9) | 0.37% | — | 30 jun 2026 | pypdf is a free and open-source pure-python PDF library. Prior to 6.13.3, a maliciously crafted PDF can cause DoS. An attacker who uses this vulnerability can craft a PDF which leads to large memory usage, as… |
| CVE-2026-54651 | Media (6.9) | 0.16% | — | 22 jun 2026 | pypdf is a free and open-source pure-python PDF library. Prior to 6.13.1, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires merging a file with threads/articles into… |
| CVE-2026-54531 | Media (6.9) | 0.17% | — | 22 jun 2026 | pypdf is a free and open-source pure-python PDF library. Prior to 6.13.0, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires merging a file with outlines into a… |
| CVE-2026-54530 | Media (6.9) | 0.17% | — | 22 jun 2026 | pypdf is a free and open-source pure-python PDF library. Prior to 6.13.0, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires extracting the text in layout mode. This… |
| CVE-2026-49461 | Media (6.9) | 0.17% | — | 22 jun 2026 | pypdf is a free and open-source pure-python PDF library. Prior to 6.12.2, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires extracting the text of a page which… |
| CVE-2026-49460 | Media (5.1) | 0.17% | — | 22 jun 2026 | pypdf is a free and open-source pure-python PDF library. Prior to 6.12.2, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires accessing a stream which uses the… |
| CVE-2026-48735 | Media (6.9) | 0.18% | — | 28 may 2026 | pypdf is a free and open-source pure-python PDF library. Prior to 6.12.1, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing large XMP metadata, possibly… |
| CVE-2026-48156 | Media (5.1) | 0.17% | — | 28 may 2026 | pypdf is a free and open-source pure-python PDF library. Prior to 6.12.0, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires cross-reference streams with /W [0 0 0]… |
| CVE-2026-48155 | Media (4.8) | 0.18% | — | 28 may 2026 | pypdf is a free and open-source pure-python PDF library. Prior to 6.12.0, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires extracting text in layout mode with… |
| CVE-2026-41314 | Media (4.8) | 0.41% | — | 22 abr 2026 | pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.2 can craft a PDF which leads to the RAM being exhausted. This requires accessing an image… |
| CVE-2026-41313 | Media (4.8) | 0.38% | — | 22 abr 2026 | pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.2 can craft a PDF which leads to long runtimes. This requires loading a PDF with a large… |
| CVE-2026-41312 | Media (4.8) | 0.41% | — | 22 abr 2026 | pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.2 can craft a PDF which leads to the RAM being exhausted. This requires accessing a stream… |
| CVE-2026-41168 | Media (6.9) | 0.52% | — | 22 abr 2026 | pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.1 can craft a PDF which leads to long runtimes. This requires cross-reference streams with… |
| CVE-2026-40260 | Media (6.9) | 0.52% | — | 17 abr 2026 | pypdf is a free and open-source pure-python PDF library. In versions prior to 6.10.0, manipulated XMP metadata entity declarations can exhaust RAM. An attacker who exploits this vulnerability can craft a PDF which leads… |
| CVE-2026-33699 | Media (4.6) | 0.58% | — | 27 mar 2026 | pypdf is a free and open-source pure-python PDF library. Versions prior to 6.9.2 have a vulnerability in which an attacker can craft a PDF which leads to an infinite loop. This requires reading a file in non-strict… |
| CVE-2026-33123 | Media (5.1) | 0.37% | — | 20 mar 2026 | pypdf is a free and open-source pure-python PDF library. Versions prior to 6.9.1 allow an attacker to craft a malicious PDF which leads to long runtimes and/or large memory usage. Exploitation requires accessing an… |
| CVE-2026-31826 | Media (6.8) | 0.18% | — | 10 mar 2026 | pypdf is a free and open-source pure-python PDF library. Prior to 6.8.0, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing a content stream with a rather… |
| CVE-2026-28804 | Media (6.9) | 0.52% | — | 6 mar 2026 | pypdf is a free and open-source pure-python PDF library. Prior to version 6.7.5, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires accessing a stream which uses the… |
| CVE-2026-28351 | Media (6.9) | 0.53% | — | 27 feb 2026 | pypdf is a free and open-source pure-python PDF library. Prior to version 6.7.4, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing the content stream using… |
| CVE-2026-27888 | Media (6.6) | 0.64% | — | 26 feb 2026 | pypdf is a free and open-source pure-python PDF library. Prior to 6.7.3, an attacker who uses this vulnerability can craft a PDF which leads to the RAM being exhausted. This requires accessing the `xfa` property of a… |
| CVE-2026-27628 | Baja (1.2) | 0.61% | — | 25 feb 2026 | pypdf is a free and open-source pure-python PDF library. Prior to 6.7.2, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires reading the file. This has been fixed in… |
| CVE-2026-27026 | Media (6.9) | 0.18% | — | 20 feb 2026 | pypdf is a free and open-source pure-python PDF library. Prior to 6.7.1, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires a malformed /FlateDecode stream, where the… |
| CVE-2026-27025 | Media (6.9) | 0.18% | — | 20 feb 2026 | pypdf is a free and open-source pure-python PDF library. Prior to 6.7.1, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consumption. This requires parsing the… |
| CVE-2026-27024 | Media (6.9) | 0.18% | — | 20 feb 2026 | pypdf is a free and open-source pure-python PDF library. Prior to 6.7.1, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires accessing the children of a TreeObject, for… |
| CVE-2026-24688 | Media (5.1) | 0.45% | — | 27 ene 2026 | pypdf is a free and open-source pure-python PDF library. An attacker who uses an infinite loop vulnerability that is present in versions prior to 6.6.2 can craft a PDF which leads to an infinite loop. This requires… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.