Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-59936

Опубликовано: 08 июл. 2026
Источник: nvd
CVSS3: 7.5
EPSS Низкий

Описание

pypdf is a free and open-source pure-python PDF library. Prior to 6.14.1, an attacker can craft a PDF with a page content stream containing a not terminated inline image, causing an infinite loop during inline image end marker detection such as when extracting page text. This issue is fixed in version 6.14.1.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:pypdf_project:pypdf:*:*:*:*:*:*:*:*
Версия до 6.14.1 (исключая)

EPSS

Процентиль: 27%
0.0034
Низкий

7.5 High

CVSS3

Дефекты

CWE-400

Связанные уязвимости

CVSS3: 7.5
ubuntu
26 дней назад

pypdf is a free and open-source pure-python PDF library. Prior to 6.14.1, an attacker can craft a PDF with a page content stream containing a not terminated inline image, causing an infinite loop during inline image end marker detection such as when extracting page text. This issue is fixed in version 6.14.1.

CVSS3: 6.5
redhat
26 дней назад

pypdf is a free and open-source pure-python PDF library. Prior to 6.14.1, an attacker can craft a PDF with a page content stream containing a not terminated inline image, causing an infinite loop during inline image end marker detection such as when extracting page text. This issue is fixed in version 6.14.1.

CVSS3: 7.5
debian
26 дней назад

pypdf is a free and open-source pure-python PDF library. Prior to 6.14 ...

github
11 дней назад

pypdf: Possible infinite loop for not terminated inline images

EPSS

Процентиль: 27%
0.0034
Низкий

7.5 High

CVSS3

Дефекты

CWE-400