Medium severity6.0NVD Advisory· Published Oct 21, 2026
CVE-2026-113794
CVE-2026-113794
Description
pypdf is a free and open-source pure-python PDF library. Prior to 6.20.0, an attacker can craft an incomplete PDF that ends inside a standard cross-reference table, causing pypdf to mishandle the unexpected end of file and enter an infinite loop. This issue is fixed in version 6.20.0.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
6- github.com/advisories/GHSA-39mj-jf6j-2qj3ghsaADVISORY
- github.com/py-pdf/pypdf/commit/37e1cd681744bac38b159f7e1c614eee8d639c58nvd
- github.com/py-pdf/pypdf/issues/4169nvd
- github.com/py-pdf/pypdf/pull/4170nvd
- github.com/py-pdf/pypdf/releases/tag/6.20.0nvd
- github.com/py-pdf/pypdf/security/advisories/GHSA-39mj-jf6j-2qj3nvd
News mentions
0No linked articles in our index yet.