Memory Consumption Issue in pypdf Library by py-pdf

CVE-2026-119204

What is CVE-2026-119204?

The pypdf library, a robust open-source PDF processing tool, has a vulnerability where it may consume excessive memory when handling specially crafted PDF page trees that contain numerous shared resources. This occurs due to inadequate document-wide entry budgeting during the page-tree flattening process, resulting in disproportionately high memory allocations. The issue has been resolved in version 6.21.4, and users are advised to upgrade to mitigate potential risks associated with their applications.

References