CVE-2026-119203

The record

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.4, pypdf can enter an infinite loop while opening a crafted incomplete PDF whose standard cross-reference table reaches the end of the file without a trailer. The trailer search can repeatedly rewind to the same stream position instead of terminating when parsing makes no progress, blocking the processing thread. This issue is fixed in version 6.21.4.

Affected packages

Related vulnerabilities

• CVE-2026-62250 LibreDWG is a free C library to read and write DWG files. CWE-835
• CVE-2026-119205 pypdf is a free and open-source pure-python PDF library. CWE-835
• CVE-2026-118781 Forge (also called node-forge) is a native implementation of Transport Layer Security in… CWE-835
• CVE-2026-111731 P-Net before 1.0.3 enters an infinite loop when handling a read request for the… CWE-835
• CVE-2026-111496 Kafka Streams derives its stream-time clock from record timestamps. CWE-835
• CVE-2026-103410 An Integer Overflow vulnerability in the DPI certificate scanner in Juniper Networks… CWE-835
• CVE-2026-118036 In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027… CWE-835
• CVE-2026-118037 In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027… CWE-835