Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-54651

pypdf: Possible infinite loop when processing threads/articles in writer

Description

pypdf is a free and open-source pure-python PDF library. Prior to 6.13.1, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires merging a file with threads/articles into a writer. This vulnerability is fixed in 6.13.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

py-pdf pypdf

  • < 6.13.1affected

References