CVE-2026-119207
HIGH—CVSS v3
—CVSS v2
—
EPSS (exploit probability)
CWE-400CWE
Description
pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consume excessive memory when strict mode loads a crafted invalid PDF dictionary. Nested parsing failures add repeated exception text to newly raised errors, allowing a small malformed dictionary to amplify into very large error messages. This issue is fixed in version 6.21.3.
Affected routers (0)
No routers currently mapped to this CVE in our database.