Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
pypdf is a free and open-source pure-python PDF library. Prior to 6.7.2, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires reading the file. This has been fixed in pypdf 6.7.2. As a workaround, one may apply the patch manually.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-02-25 | 3 | Disclosure3 |
| 2026-03-02 | 1 | Disclosure1 |
CVE-2026-27628 Infinite Loop Vulnerability in pypdf Library Before Version 6.7.2 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-27628
Post summary
A new infinite loop vulnerability (CVE-2026-27628) affecting pypdf library versions before 6.7.2 has been disclosed, with details available on Vulmon.
CVE-2026-27628 (CVSS:1.2, HIGH) is Modified. pypdf is a free and open-source pure-python PDF library. Prior to 6.7.2, an attacker who uses this vulnerability can cra..https://nvd.nist.gov/vuln/detail/CVE-2026-27628 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces CVE-2026-27628, a high‑severity vulnerability in pypdf before version 6.7.2, providing basic technical details but no PoC, exploit code, or patch information.
CVE-2026-27628: The Ouroboros Document: Infinite Loops in pypdf A critical Denial of Service (DoS) vulnerability exists in the `pypdf` library, a ubiquitous tool for PDF manipulation in the Python ecosystem. By crafting a PDF with a circular cross-ref... https://cvereports.com/reports/CVE-2026-27628
Post summary
The post announces a critical DoS vulnerability in the pypdf library caused by circular cross‑references in PDFs, but provides no PoC, exploit, patch, or evidence of active exploitation.
CVE-2026-27628 pypdf is a free and open-source pure-python PDF library. Prior to 6.7.2, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This… https://www.cve.org/CVERecord?id=CVE-2026-27628
Post summary
The post announces CVE‑2026‑27628 in the pypdf library, noting that before version 6.7.2 a crafted PDF can trigger an infinite loop, but it does not provide a PoC, exploit, patch, or evidence of active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | pypdf_project | pypdf | - | - | - |