CVE-2026-103000

Summary

A crafted PDF file can cause pypdf to consume excessive memory when retrieving page labels, potentially leading to application unavailability. This vulnerability affects versions prior to 6.19.0.

Exploitability

Exploitation is relatively straightforward as it requires only a malicious PDF file to be processed by an application using pypdf, with no additional preconditions needed.

Blast radius

The impact could be significant in environments where PDF processing is common, potentially causing denial of service across multiple applications that use pypdf for PDF handling.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to pypdf version 6.19.0 or later to remediate this memory exhaustion vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.