Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
pypdf is a free and open-source pure-python PDF library. Prior to 6.8.0, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing a content stream with a rather large /Length value, regardless of the actual data length inside the stream. This vulnerability is fixed in 6.8.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-31826 Memory Exhaustion Vulnerability in pypdf Library Prior to Version 6.8.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-31826
Post summary
The message reports a memory exhaustion vulnerability (CVE-2026-31826) in the pypdf library before version 6.8.0, with no PoC, exploit, or patch details provided.
CVE-2026-31826 pypdf is a free and open-source pure-python PDF library. Prior to 6.8.0, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. Th… https://www.cve.org/CVERecord?id=CVE-2026-31826
Post summary
The post announces CVE‑2026-31826, describing a memory‑exhaustion vulnerability in pypdf versions before 6.8.0, but it does not provide exploit code, patches, or evidence of active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | pypdf_project | pypdf | - | - | - |