Security Advisory

CVE-2026-48155

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-28 14:51:49
Last updated 2026-05-28 15:57:54
Assigner GitHub_M
CVSS score 4.8
State PUBLISHED

Description

pypdf is a free and open-source pure-python PDF library. Prior to 6.12.0, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires extracting text in layout mode with large character offsets. This vulnerability is fixed in 6.12.0.