CVE-2026-84310
pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/_doc_common.py _get_outline to consume long runtimes and large amounts of memory when retrieving document outlines with large numbers of entries or deeply nested reused paths because the traversal lacked global entry-count and nesting-depth limits. This issue is fixed in version 6.16.1.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 4.8
- CVSS vector
- CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
- EPSS probability
- 0.14%
- CWE
- CWE-405, CWE-834
- Published
- 2026-09-01
- Last modified
- 2026-09-04
Affected products
- py-pdf pypdf
Weakness type
Related vulnerabilities
- CVE-2026-87011 — Open WebUI: Unauthenticated requests can stall the server via uncached OIDC fetches in back-channel logout
- CVE-2026-86432 — commonmark 2.0.0 before 2.8.4 Denial of Service via XML
- CVE-2026-82309 — Robots::Validate versions from 0.3.2 before 0.3.11 for Perl allow unbounded outbound DNS queries per validation via a forward-confirmation loop that does not bound the names it queries
- CVE-2026-54874 — Excessive Memory Use Buffering DTLS Records for a Future Epoch
- CVE-2026-23934 — Frontend DoS via the validate.api.exists action
- CVE-2026-23930 — Frontend DoS via the popup.testtriggerexpr action
- CVE-2026-72914 — Mastodon: Exhausting data by an unauthenticated request to the admin retention API
- CVE-2025-32394 — AutoGPT: There is a DoS vulnerability in AITextSummarizerBlock