Memory Consumption Vulnerability in pypdf Library by PyPDF
CVE-2026-113789

6MEDIUM

Key Information:

Vendor

Py-PDF

Status
Vendor
CVE Published:
21 October 2026

What is CVE-2026-113789?

The pypdf library, a widely used open-source PDF processing tool in Python, is susceptible to a vulnerability that allows an attacker to create a specially crafted PDF file. This manipulated document can lead to excessive memory usage or prolonged execution times when an application attempts to retrieve the form fields contained within. The issue is effectively addressed in version 6.21.0, emphasizing the importance of keeping this library updated to prevent potential denial of service scenarios and maintain efficiency in PDF handling.

Affected Version(s)

pypdf < 6.21.0

References

CVSS V4

Score:
6
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.