← voltar
CVE-2026-22691

pypdf has possible long runtimes for malformed startxref

CVSS 2.7 LOWEPSS 0.4%CWE-1333CWE-400
pypdf is a free and open-source pure-python PDF library. Prior to version 6.6.0, pypdf has possible long runtimes for malformed startxref. An attacker who uses this vulnerability can craft a PDF which leads to possibly long runtimes for invalid startxref entries. When rebuilding the cross-reference table, PDF files with lots of whitespace characters become problematic. Only the non-strict reading mode is affected. Only the non-strict reading mode is affected. This issue has been patched in version 6.6.0.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U
Produtos afetados
py-pdf · pypdf

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →