CVE-2026-33123Disclosure(pypdf_project / pypdf)

LOWCVSS 6.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

pypdf is a free and open-source pure-python PDF library. Versions prior to 6.9.1 allow an attacker to craft a malicious PDF which leads to long runtimes and/or large memory usage. Exploitation requires accessing an array-based stream with many entries. This issue has been fixed in version 6.9.1.

pypdf_project CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Patch / fix

Other references

https://github.com/py-pdf/pypdf/releases/tag/6.9.1

Weakness type (CWE)

CWE-400CWE-407

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

pypdf

Threat summary

2 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
Peaked 1d ago at 1 mentions (2026-03-20); latest day: 1
2 total mentions across 2 days

Affected systems

Vendors

pypdf_project

Products

pypdf

Deep dive

Activity timeline2 mentions / 2d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets3 URLs

By indicator

Full discourse2 posts

Vulmon Vulnerability Feed@VulmonFeeds204d
Disclosure
CVE-2026-33123 pypdf Denial of Service via Malicious PDF Stream Array Pa... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-33123 Don't wait vulnerability scanning results: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=2
Post summary
The tweet alerts about CVE‑2026‑33123, a Denial of Service vulnerability in pypdf, and provides a link to a vulnerability listing, but offers no PoC, exploit code, or patch details.
0000141
4.0K followersView on X
CVE@CVEnew202d
Disclosure
CVE-2026-33123 pypdf is a free and open-source pure-python PDF library. Versions prior to 6.9.1 allow an attacker to craft a malicious PDF which leads to long runtimes and/or large … https://www.cve.org/CVERecord?id=CVE-2026-33123
Post summary
The entry announces CVE‑2026‑33123 for the pypdf library, noting that pre‑6.9.1 versions can be exploited via crafted PDFs leading to excessive runtimes or memory usage. No PoC, exploit code, patch, or active exploitation evidence is provided.
00000119
56.8K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	pypdf_project	pypdf	-	-	-

Explore more

Back to dashboard pypdf_project CVEs pypdf vulnerabilities