Summary
pypdf: Possible large memory usage for wrong image dimensions
Advisory details
Impact
An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires loading images where the declared size values are much too large compared to the actual data.
Patches
This has been fixed in pypdf==6.14.0.
Workarounds
If you cannot upgrade yet, consider applying the changes from PR #3888.
References
- https://github.com/advisories/GHSA-5qjq-93h5-hrgp
- https://github.com/py-pdf/pypdf/security/advisories/GHSA-5qjq-93h5-hrgp
- https://nvd.nist.gov/vuln/detail/CVE-2026-59938
- https://github.com/py-pdf/pypdf/pull/3888
- https://github.com/py-pdf/pypdf/commit/c64583be16b8e8763d8777075f8ecbf382014b7a
- https://github.com/py-pdf/pypdf/releases/tag/6.14.0
Related vulnerabilities
All Supply chain →- MEDIUMCVE-2026-55407
Buffa Vulnerable to Memory Exhaustion Denial of Service in decode_unknown_field via Unbounded Allocation
- HIGHCVE-2026-77354
kin-openapi has uncontrolled resource consumption in openapi3filter deepObject query parameter decoding
- HIGHCVE-2026-55149
vouch-proxy has an Unbounded Multipart Cookie Allocation DoS
- HIGHCVE-2026-69219
RabbitMQ Java client ValueReader: Oversized LongString/bytes length triggers OOM via unchecked allocation
- HIGHCVE-2026-71314
Nuxt: Unauthenticated out-of-memory crash via unbounded v-for expansion in island rendering
- MEDIUMCVE-2026-52857
Wings: Maliciously or erroneously created parsed config files can cause wings process to OOM