GHSA-4f6g-68pf-7vhv

Опубликовано: 09 янв. 2026

Источник: github

Github: Прошло ревью

CVSS4: 2.7

Описание

pypdf has possible long runtimes for malformed startxref

Impact

An attacker who exploits this vulnerability can craft a PDF which leads to possibly long runtimes for invalid startxref entries. When rebuilding the cross-reference table, PDF files with lots of whitespace characters become problematic. Only the non-strict reading mode is affected.

Patches

This has been fixed in pypdf==6.6.0.

Workarounds

from pypdf import PdfReader, PdfWriter # Instead of reader = PdfReader("file.pdf") # use the strict mode: reader = PdfReader("file.pdf", strict=True) # Instead of writer = PdfWriter(clone_from="file.pdf") # use an explicit strict reader: writer = PdfWriter(clone_from=PdfReader("file.pdf", strict=True))

Resources

This issue has been fixed in #3594.

Ссылки

Пакеты

Наименование

pypdf

pip

Затронутые версииВерсия исправления

< 6.6.0

6.6.0

EPSS

Процентиль: 13%

0.00042

Низкий

2.7 Low

CVSS4

CVE ID

CVE-2026-22691

Дефекты

CWE-1333

CWE-400

Связанные уязвимости

CVE-2026-22691

ubuntu

5 дней назад

pypdf is a free and open-source pure-python PDF library. Prior to version 6.6.0, pypdf has possible long runtimes for malformed startxref. An attacker who uses this vulnerability can craft a PDF which leads to possibly long runtimes for invalid startxref entries. When rebuilding the cross-reference table, PDF files with lots of whitespace characters become problematic. Only the non-strict reading mode is affected. Only the non-strict reading mode is affected. This issue has been patched in version 6.6.0.