Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
pypdf is a free and open-source pure-python PDF library. Prior to 6.16.0, an attacker can craft a PDF whose cyclic tree structure causes pypdf/generic/_data_structures.py TreeObject.insert_child to follow /Next links indefinitely when a writing code path inserts a child, producing an infinite loop. This issue is fixed in version 6.16.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-09-02 | 1 | Disclosure1 |
| 2026-09-03 | 1 | General1 |
Yapp an another 2/4 for the pending reports for Aug CVE-2026-84309, it was just a python pdf package which I accidentally found myself working on it while crosscheck other stuffs. I wanna get into drivers before the end of month, hit me up of if you got cool resources 🤝.
Post summary
The post references CVE‑2026‑84309 but provides no additional technical details, PoC, exploit, or mitigation information.
🟠 pypdf, Infinite Loop (CWE-835), #CVE-2026-84309 (Moderate) -DC-Sep2026-2075 https://dailycve.com/pypdf-infinite-loop-cwe-835-cve-2026-84309-moderate-dc-sep2026-2075/
Post summary
The entry announces a disclosed CVE‑2026‑84309 affecting PyPDF, describing it as an infinite loop (CWE‑835) with moderate severity.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | pypdf_project | pypdf | - | - | - |