The pypdf library has vulnerabilities that allow attackers to exploit PDF files and cause long runtimes or RAM exhaustion.

🚨 EUVD-2026-25112 📊 Score: 4.8/10 (CVSS v3.1) 📦 Product: pypdf 🏢 Vendor: py-pdf 📅 Updated: 2026-04-22 📝 pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.2 can craft a PDF which leads to the RAM being exhausted. This requires accessing a stream compressed using `/FlateDecode` with a `/P... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-25112 #cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-25114 📊 Score: 4.8/10 (CVSS v3.1) 📦 Product: pypdf 🏢 Vendor: py-pdf 📅 Updated: 2026-04-22 📝 pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.2 can craft a PDF which leads to long runtimes. This requires loading a PDF with a large trailer `/Size` value in incremental mode. T... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-25114 #cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-25116 📊 Score: 4.8/10 (CVSS v3.1) 📦 Product: pypdf 🏢 Vendor: py-pdf 📅 Updated: 2026-04-22 📝 pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.2 can craft a PDF which leads to the RAM being exhausted. This requires accessing an image using `/FlateDecode` with large size value... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-25116 #cybersecurity #infosec #euvd #cve #vulnerability