CVE-2026-115580

— UNSCOREDpublic exploit available

Published 2026-10-23 · Updated 2026-10-26

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.2, an attacker can craft a PDF with a standard cross-reference table whose declared entry count exceeds what the file can contain, causing excessive processing and long runtimes when the file is opened. This issue is fixed in version 6.21.2.

Weaknesses

CWE-834

Public exploit & PoC references

https://github.com/py-pdf/pypdf/commit/a3061e34b169d34478d520f5f049c53cfb1482b2
https://github.com/py-pdf/pypdf/pull/4239
https://github.com/py-pdf/pypdf/releases/tag/6.21.2
https://github.com/py-pdf/pypdf/security/advisories/GHSA-gmh7-3g9r-mjh5

All references

https://github.com/py-pdf/pypdf/commit/a3061e34b169d34478d520f5f049c53cfb1482b2
https://github.com/py-pdf/pypdf/pull/4239
https://github.com/py-pdf/pypdf/releases/tag/6.21.2
https://github.com/py-pdf/pypdf/security/advisories/GHSA-gmh7-3g9r-mjh5

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

MEDIUMCVE-2026-106576PoC
MEDIUMCVE-2026-110596PoC
MEDIUMCVE-2026-115911PoC
UNSCOREDCVE-2026-53493PoC
MEDIUMCVE-2026-77399PoC
MEDIUMCVE-2026-81880PoC
UNSCOREDCVE-2026-87721
UNSCOREDCVE-2026-90798

Related by shared AI tags and CWE weakness class. Browse the full archive.