NVD Vulnerability Detail
Search Exploit, PoC
CVE-2026-48735
Summary

pypdf is a free and open-source pure-python PDF library. Prior to 6.12.1, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing large XMP metadata, possibly with lots of unnecessary elements. This vulnerability is fixed in 6.12.1.

Publication Date May 29, 2026, 1:16 a.m.
Registration Date May 29, 2026, 4:15 a.m.
Last Update May 29, 2026, 3:55 a.m.
Related information, measures and tools
Common Vulnerabilities List