CVE-2026-113789

Published: Ott 21, 2026 Last Modified: Ott 21, 2026
ExploitDB:
Other exploit source:
Google Dorks:
MEDIUM 6,0
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: passive
Confidentiality: N/A
Integrity: N/A
Availability: N/A

Description

AI Translation Available

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can craft a PDF that causes large memory usage or long runtimes when an application retrieves the document's form fields. This issue is fixed in version 6.21.0.

400

Uncontrolled Resource Consumption

Draft
Abstraction: Class Structure: Simple
Common Consequences
Security Scopes Affected:
Availability Access Control Other
Potential Impacts:
Dos: Crash, Exit, Or Restart Dos: Resource Consumption (Cpu) Dos: Resource Consumption (Memory) Dos: Resource Consumption (Other) Bypass Protection Mechanism Other
Applicable Platforms
Technologies: Not Technology-Specific, AI/ML
Likelihood of Exploit: High
View CWE Details
407

Inefficient Algorithmic Complexity

Incomplete
Abstraction: Class Structure: Simple
Common Consequences
Security Scopes Affected:
Availability
Potential Impacts:
Dos: Resource Consumption (Cpu) Dos: Resource Consumption (Memory) Dos: Resource Consumption (Other)
Applicable Platforms
All platforms may be affected
Likelihood of Exploit: Low
View CWE Details
https://github.com/py-pdf/pypdf/commit/5ef728f0e16d225c853e…
https://github.com/py-pdf/pypdf/commit/5ef728f0e16d225c853e89f861ba0a67402fe3f2
https://github.com/py-pdf/pypdf/pull/4219
https://github.com/py-pdf/pypdf/pull/4219
https://github.com/py-pdf/pypdf/releases/tag/6.21.0
https://github.com/py-pdf/pypdf/releases/tag/6.21.0
https://github.com/py-pdf/pypdf/security/advisories/GHSA-6v…
https://github.com/py-pdf/pypdf/security/advisories/GHSA-6vvc-x485-93v7