Security Advisory

CVE-2026-82398

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-31 21:41:10

Last updated 2026-09-01 14:57:30

Assigner GitHub_M

CVSS score 6.9

State PUBLISHED

Description

pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, an attacker can craft a PDF that causes long runtimes when the pypdf/_utils.py function read_until_whitespace reads a stream containing a long run of bytes without whitespace. The function repeatedly performs immutable bytes concatenation in a one-byte loop, causing quadratic processing cost for the long non-whitespace input. This issue is fixed in version 6.15.0.

← Browse all CVEs View on cve.org ↗