{"id":"CVE-2026-48735","title":"pypdf is a free and open-source pure-python PDF library","summary":"pypdf is a free and open-source pure-python PDF library. Prior to 6.12.1, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing large XMP metadata, possibly with lots of unnecess…","severity":"medium","cvss":5.5,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":["CWE-770"],"vendor":"pypdf_project","product":"pypdf","affected":["pypdf < 6.12.1"],"patched":["pypdf 6.12.1"],"published":"2026-05-28","updated":"2026-10-14","sourceUpdated":"2026-10-14T20:10:00.190","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-48735","references":[{"url":"https://github.com/py-pdf/pypdf/pull/3796","label":"security-advisories@github.com"},{"url":"https://github.com/py-pdf/pypdf/releases/tag/6.12.1","label":"security-advisories@github.com"},{"url":"https://github.com/py-pdf/pypdf/security/advisories/GHSA-wjqc-6w8f-h24c","label":"security-advisories@github.com"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48735"},{"url":"https://github.com/advisories/GHSA-wjqc-6w8f-h24c"}],"tags":["nvd","ghsa","pip"],"epss":0.00128,"epssPercentile":0.02462,"aliases":["GHSA-wjqc-6w8f-h24c"],"ecosystem":"pip","ingestedAt":"2026-07-07T15:41:58.391Z","slug":"CVE-2026-48735","body":"## Overview\n\npypdf is a free and open-source pure-python PDF library. Prior to 6.12.1, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing large XMP metadata, possibly with lots of unnecessary elements. This vulnerability is fixed in 6.12.1.\n\n## Affected\n\n- `pypdf < 6.12.1`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `pypdf 6.12.1`\n\n## Package advisory (CVE-2026-48735)\n\nAffected packages:\n\n- `pypdf < 6.12.1`\n\nPatched in:\n\n- `pypdf 6.12.1`\n\nSource: https://github.com/advisories/GHSA-wjqc-6w8f-h24c","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":30.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":220479,"id":"CVE-2026-48735","ts":1792011299823,"field":"cvss","old":null,"new":"5.5"}]}