Memory Consumption Vulnerability in pypdf Library by PyPDF

CVE-2026-84310

What is CVE-2026-84310?

The pypdf library, a pure-Python tool for working with PDF files, has a vulnerability that allows an attacker to exploit it by crafting a specially structured PDF document. This leads to excessive memory usage and prolonged execution times when attempting to retrieve document outlines that contain many entries or are deeply nested. The issue arises due to the lack of global limits on the number of entries and the depth of nested items. This vulnerability has been addressed in version 6.16.1, which implements necessary checks to enhance stability and security against such attacks. Users are strongly advised to update to this version to protect their systems.

References