CVE-2026-84310 | BDVDB-2026-367164 Detail

Description#

pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/_doc_common.py _get_outline to consume long runtimes and large amounts of memory when retrieving document outlines with large numbers of entries or deeply nested reused paths because the traversal lacked global entry-count and nesting-depth limits. This issue is fixed in version 6.16.1.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-09-01Record published in the CVE List.
2. Version 22026-09-04Most recent update recorded in the CVE List.