Approved changes feed: RSS · Atom
cpe:2.3:a:py-pdf:pypdf:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Py Pdf (a6ec5f1b-f9fe-55d1-b5bf-836fda10e807) |
|---|---|
| Product | Pypdf (7641757d-c5c6-5dfc-9f70-5ca13f2e017c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-71870 |
vulnerable | 2026-09-16 04:32:59.515715 |
pypdf: Possible large memory usage for large /ToUnicode streams
pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause large memory consumption when pypdf/_cmap.py function parse_bfrange parses unusually large source-code or destination-string tokens in a font /ToUnicode CMap during text extraction. This issue is fixed in 6.15.0.
Published: 2026-08-07T19:28:26.178Z
Updated: 2026-08-10T12:24:22.451Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-71852 |
vulnerable | 2026-09-16 04:32:59.096159 |
pypdf: Possible long runtimes/large memory usage for large CID font width ranges
pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause long runtimes and large memory consumption when pypdf/_font.py function Font._collect_cid_character_widths expands unusually large CID font /W width ranges or excessive width entries during text extraction. This issue is fixed in 6.15.0.
Published: 2026-08-07T18:53:46.083Z
Updated: 2026-08-10T12:03:44.673Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-59938 |
vulnerable | 2026-07-29 01:03:18.056416 |
pypdf: Possible large memory usage for wrong image dimensions
pypdf is a free and open-source pure-python PDF library. Prior to 6.14.0, an attacker can craft a PDF with declared image size values that are much too large compared to the actual data, causing large memory usage in pypdf image parsing. This issue is fixed in version 6.14.0.
Published: 2026-07-08T17:24:29.959Z
Updated: 2026-07-09T13:58:17.678Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-59937 |
vulnerable | 2026-07-29 01:03:18.056304 |
pypdf: Possible long runtimes for repeated malformed cross-reference entries
pypdf is a free and open-source pure-python PDF library. Prior to 6.14.0, an attacker can craft a PDF with repeated malformed cross-reference streams that cause pypdf to spend long runtimes recovering broken cross-reference table entries. This issue is fixed in version 6.14.0.
Published: 2026-07-08T17:25:34.026Z
Updated: 2026-07-09T14:41:30.071Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-59936 |
vulnerable | 2026-07-29 01:03:18.056171 |
pypdf: Possible infinite loop for not terminated inline images
pypdf is a free and open-source pure-python PDF library. Prior to 6.14.1, an attacker can craft a PDF with a page content stream containing a not terminated inline image, causing an infinite loop during inline image end marker detection such as when extracting page text. This issue is fixed in version 6.14.1.
Published: 2026-07-08T19:34:22.610Z
Updated: 2026-07-09T13:28:21.161Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-59935 |
vulnerable | 2026-07-29 01:03:18.055854 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-57204 |
vulnerable | 2026-07-29 01:00:29.494962 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-54651 |
vulnerable | 2026-07-29 01:00:27.910683 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-54531 |
vulnerable | 2026-07-29 01:00:27.883593 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-54530 |
vulnerable | 2026-07-29 01:00:27.883382 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-49461 |
vulnerable | 2026-07-29 00:57:45.457778 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-49460 |
vulnerable | 2026-07-29 00:57:45.457567 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48735 |
vulnerable | 2026-06-08 08:05:12.319384 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48156 |
vulnerable | 2026-06-08 08:05:12.260232 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48155 |
vulnerable | 2026-06-08 08:05:12.260028 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-41314 |
vulnerable | 2026-06-08 08:03:15.210371 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-41313 |
vulnerable | 2026-06-08 08:03:15.209950 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-41312 |
vulnerable | 2026-06-08 08:03:15.209555 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-41168 |
vulnerable | 2026-06-08 08:03:14.988914 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-40260 |
vulnerable | 2026-06-08 08:01:20.102160 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-33699 |
vulnerable | 2026-06-08 07:59:10.608200 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-33123 |
vulnerable | 2026-06-08 07:57:18.695790 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-31826 |
vulnerable | 2026-06-08 07:57:15.934985 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-28804 |
vulnerable | 2026-06-08 07:55:15.694100 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-28351 |
vulnerable | 2026-06-08 07:55:15.171430 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-27888 |
vulnerable | 2026-06-08 07:55:14.087451 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-27628 |
vulnerable | 2026-06-08 07:53:22.677772 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-27026 |
vulnerable | 2026-06-08 07:53:21.841814 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-27025 |
vulnerable | 2026-06-08 07:53:21.841363 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-27024 |
vulnerable | 2026-06-08 07:53:21.839534 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24688 |
vulnerable | 2026-06-08 07:51:17.984424 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-22691 |
vulnerable | 2026-06-08 07:51:13.604649 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-22690 |
vulnerable | 2026-06-08 07:51:13.602763 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-66019 |
vulnerable | 2026-06-08 07:39:21.125403 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-62708 |
vulnerable | 2026-06-08 07:39:16.505970 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-62707 |
vulnerable | 2026-06-08 07:39:16.504307 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55197 |
vulnerable | 2026-06-08 07:33:14.351666 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-46250 |
vulnerable | 2026-06-08 06:12:44.491986 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-36810 |
vulnerable | 2026-06-08 06:08:13.522861 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-36807 |
vulnerable | 2026-06-08 06:08:13.518525 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-36464 |
vulnerable | 2026-06-08 06:08:11.734733 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.