Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2026-119204

pypdf: Possible large memory usage when parsing page tree

Description

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.4, pypdf can consume excessive memory while parsing a crafted PDF page tree containing many shared resources. Page-tree flattening copies page dictionary and inherited resource entries without a document-wide entry budget, allowing the crafted resource structure to cause disproportionate allocations. This issue is fixed in version 6.21.4.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

py-pdf pypdf

  • < 6.21.4affected

References