Executive brief
pypdf and PyPDF2 possible Infinite Loop when a comment isn't followed by a character
Affected products
- PyPI pypdf2
- PyPI pypdf
Junglewise Threat Intelligence
CVE-2023-36464: PYSEC-2026-3008 - pypdf and PyPDF2 possible Infinite Loop when a comment isn't followed by a character
CVE-2023-36464 · Severity: low · CVSS 3.1 · Published 2026-07-13
Technologies: pypdf2 (PyPI), pypdf (PyPI). Vendors: PyPI.
Related threats
- pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/_page.py PageObject.
- pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/_doc_common.py _get_
- pypdf is a free and open-source pure-python PDF library. Prior to 6.16.0, an attacker can craft a PDF whose cyclic tree structure causes pyp
- pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, an attacker can craft a PDF that causes long runtimes when the pyp
- pypdf uncontrolled resource consumption in ToUnicode streams