CVE-2026-113795

6.0 Moyenne

Publiée le 21/10/2026 à 18:17 · Modifiée le 21/10/2026 à 18:17 · Reçue · Source : security-advisories@github.com

Description

pypdf is a free and open-source pure-python PDF library. Prior to 6.20.0, accessing a crafted PDF stream with a large number of filters or multiple filters that pass around large amounts of data can cause large memory consumption. This issue is fixed in version 6.20.0.

Traduire en français

Produits concernés

py-pdf pypdf

Scores CVSS

Version	Score	Source	Vecteur
4.0	6.0 Moyenne	security-advisories@github.com	`CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X`

Faiblesses (CWE)

CWE-400
CWE-770

Références

https://github.com/py-pdf/pypdf/commit/80a84d4be6022d910874ccb0d2365400f3f0e185
https://github.com/py-pdf/pypdf/pull/4173
https://github.com/py-pdf/pypdf/releases/tag/6.20.0
https://github.com/py-pdf/pypdf/security/advisories/GHSA-7mh2-4gg2-979f

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories