Executive brief
PyPDF2 quadratic runtime with malformed PDF missing xref marker
Affected products
- PyPI pypdf2
Junglewise Threat Intelligence
CVE-2023-36810: PYSEC-2026-1837 - PyPDF2 quadratic runtime with malformed PDF missing xref marker
CVE-2023-36810 · Severity: low · CVSS 3.1 · Published 2026-07-07
Technologies: pypdf2 (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-3008 - pypdf and PyPDF2 possible Infinite Loop when a comment isn't followed by a character
- PYSEC-2026-1836 - PyPDF2 vulnerable to possible Infinite Loop when reading malformed objects
- PYSEC-2022-194 - PyPDF2 is an open source python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files. In versions pr