Security Advisory

CVE-2026-59935

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-08 19:34:15

Last updated 2026-07-09 13:36:17

Assigner GitHub_M

CVSS score 8.7

State PUBLISHED

Description

pypdf is a free and open-source pure-python PDF library. Prior to 6.14.2, an attacker can craft a PDF with a page content stream containing a not terminated inline image that uses the ASCII85 or ASCIIHex filters, causing an infinite loop during parsing such as when extracting page text. This issue is fixed in version 6.14.2.

← Browse all CVEs View on cve.org ↗