Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-54530

pypdf: Possible infinite loop when retrieving fonts for layout-mode text extraction

Description

pypdf is a free and open-source pure-python PDF library. Prior to 6.13.0, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires extracting the text in layout mode. This vulnerability is fixed in 6.13.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

py-pdf pypdf

  • < 6.13.0affected

References