Security Advisory

CVE-2026-59936

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-08 19:34:22
Last updated 2026-07-09 13:28:21
Assigner GitHub_M
CVSS score 8.7
State PUBLISHED

Description

pypdf is a free and open-source pure-python PDF library. Prior to 6.14.1, an attacker can craft a PDF with a page content stream containing a not terminated inline image, causing an infinite loop during inline image end marker detection such as when extracting page text. This issue is fixed in version 6.14.1.