These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
CVE-2026-84311 is a vulnerability in the pypdf library that can cause long runtimes and large memory consumption when processing a specially crafted PDF. The issue is fixed in version 6.16.1. This vulnerability is caused by a directed acyclic graph of reused form XObjects in a PDF, which can create exponentially many traversal paths. Defenders should assess exposure and prioritize updating to version 6.16 [truncated]
CVE-2026-84309 is a vulnerability in the pypdf library, which is a free and open-source pure-python PDF library. An attacker can craft a PDF with a cyclic tree structure that causes pypdf/generic/_data_structures.py TreeObject.insert_child to follow /Next links indefinitely when a writing code path inserts a child, producing an infinite loop. This issue is fixed in version 6.16.0.
CVE-2026-82398 is a vulnerability in the pypdf library that can cause long runtimes when processing a specially crafted PDF. The issue is fixed in version 6.15.0. The vulnerability is caused by the read_until_whitespace function in pypdf/_utils.py, which can lead to quadratic processing costs for long non-whitespace input. This can result in potential performance issues and increased risk of denial-of-ser [truncated]
A crafted PDF can cause large memory consumption in pypdf when parsing unusually large source-code or destination-string tokens in a font /ToUnicode CMap during text extraction. This issue is fixed in pypdf version 6.15.0. The vulnerability affects pypdf, a widely used PDF library, and could lead to large memory consumption and potential denial-of-service (DoS) when parsing crafted PDFs. Defenders should [truncated]
A crafted PDF can cause long runtimes and large memory consumption in pypdf versions before 6.15.0 due to the expansion of unusually large CID font /W width ranges or excessive width entries during text extraction. This issue can impact PDF processing workflows, particularly those using pypdf for text extraction or other operations. Defenders should assess their exposure and prioritize updates to mitigate [truncated]
A memory consumption vulnerability exists in pypdf versions prior to 6.12.1. An attacker can craft a PDF with large XMP metadata containing excessive unnecessary elements, causing significant memory usage during parsing. This represents a denial-of-service condition through resource exhaustion. The vulnerability is classified as CWE-770 (Allocation of Resources Without Limits or Throttling). The issue was [truncated]
A denial-of-service vulnerability exists in pypdf prior to version 6.12.0. An attacker can craft a malicious PDF file that causes excessive processing time, leading to application slowdown or unavailability. The attack leverages cross-reference streams with /W [0 0 0] values combined with large /Size values in the PDF structure. This vulnerability has been assigned a CVSS 4.0 score of 5.1 (MEDIUM severity [truncated]
CVE-2026-48155 is a medium-severity uncontrolled resource consumption vulnerability (CWE-400) in pypdf, a pure-Python PDF library. The vulnerability exists in versions prior to 6.12.0 and can be triggered when extracting text in layout mode with large character offsets, leading to excessive memory usage. The issue was published on 2026-05-28 and remains under analysis by NVD. No known exploitation in the [truncated]