Denial of Service Vulnerability in pypdf by PyPDF

CVE-2026-41314

What is CVE-2026-41314?

The pypdf library, an open-source pure-Python PDF handling tool, is susceptible to a denial of service vulnerability in versions before 6.10.2. Attackers can exploit this flaw by crafting specially formatted PDFs that trigger excessive RAM consumption during decoding, specifically when utilizing the /FlateDecode stream with large size parameters. This vulnerability can result in service interruptions and degraded performance. It has been mitigated in pypdf version 6.10.2, and users are encouraged to update or apply patches manually to safeguard against potential exploitation.

References