EUVD-2026-25116Severity by source
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Primary rating from GitHub Advisory.
CVSS VectorGitHub Advisory
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
7Blast Radius
ecosystem impact- 89 pypi packages depend on pypdf (19 direct, 70 indirect)
Ecosystem-wide dependent count for version 6.10.2.
DescriptionGitHub Advisory
pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.2 can craft a PDF which leads to the RAM being exhausted. This requires accessing an image using /FlateDecode with large size values. This has been fixed in pypdf 6.10.2. As a workaround, one may apply the changes from the patch manually.
AnalysisAI
Denial of service via memory exhaustion in pypdf prior to 6.10.2 allows local attackers with user interaction to crash applications processing crafted PDF files containing FlateDecode-compressed images with inflated size values. The vulnerability exhausts available RAM during decompression, affecting any system using vulnerable pypdf versions to parse untrusted PDF documents.
Technical ContextAI
pypdf is a pure-Python PDF parsing library that processes PDF streams, including compressed image data. The vulnerability resides in the FlateDecode decompression handler, which implements zlib-based deflate decompression commonly used in PDF for image and content stream compression. The root cause is CWE-789 (memory allocation with excessive size values), where the library fails to validate or limit the declared uncompressed size of image objects before allocating memory or decompressing them. An attacker crafts a PDF with an image object specifying a /FlateDecode filter and artificially large Width/Height or other dimension parameters, causing the decompression routine to allocate and consume excessive RAM until the system runs out of memory. The CPE cpe:2.3:a:py-pdf:pypdf:*:*:*:*:*:*:*:* identifies all pypdf distributions prior to version 6.10.2 as affected.
RemediationAI
Upgrade pypdf to version 6.10.2 or later, which includes the fix available in GitHub commit ac734dab4eef92bcce50d503949b4d9887d89f11. For Python environments, run 'pip install --upgrade pypdf>=6.10.2'. As an interim workaround for applications unable to upgrade immediately, manually apply the patch from the GitHub pull request (https://github.com/py-pdf/pypdf/pull/3734), which adds size validation to the FlateDecode decompression handler. Additionally, restrict pypdf's access to untrusted PDFs by implementing file validation (e.g., reject PDFs from unknown sources), running pypdf in resource-limited containers with enforced memory quotas, or using a sandboxed process to parse externally sourced documents with a timeout mechanism. Each mitigation has trade-offs: manual patching requires code review and testing; resource limits may affect legitimate large-document processing; sandboxing adds latency.
Wazuh SIEM platform versions 4.4.0 through 4.9.0 contain an unsafe deserialization vulnerability in the DistributedAPI t
BentoML version 1.4.2 and earlier contains an unauthenticated remote code execution vulnerability through insecure deser
pgAdmin 4 contains critical remote code execution vulnerabilities in the Query Tool download and Cloud Deployment endpoi
The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through 0.9.10 uses the pickle Python
BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Rated critica
OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCiph
pyLoad download manager version prior to 0.5.0b3.dev77 exposes the Flask SECRET_KEY through an unauthenticated endpoint.
In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python debugger, and conse
Unauthenticated remote code execution in Marimo ≤0.20.4 allows attackers to execute arbitrary system commands via the `/
pyLoad is the free and open-source Download Manager written in pure Python. Rated medium severity (CVSS 5.3), this vulne
Langflow (a visual LLM pipeline builder) contains a critical unauthenticated code execution vulnerability (CVE-2026-3301
Cross-user flow execution in Langflow (< 1.9.1) lets any authenticated API-key holder run another user's flow by passing
Same technique Information Disclosure
View allVendor StatusVendor
SUSE
Severity: MediumShare
External POC / Exploit Code
Leaving vuln.today