CVE-2026-27024

ADVISORY - github

Summary

Impact

An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires accessing the children of a TreeObject, for example as part of outlines.

Patches

This has been fixed in pypdf==6.7.1.

Workarounds

If you cannot upgrade yet, consider applying the changes from PR #3645.

Common Weakness Enumeration (CWE)

ADVISORY - github

CWE-835⁠

Loop with Unreachable Exit Condition ('Infinite Loop')

Impacted images

Advisories

GitHub

CREATED

6 hours ago

UPDATED

6 hours ago

ADVISORY IDGHSA-996q-pr4m-cvgq⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-835⁠

CVSS SCORE

6.9medium