pypdf has possible infinite loop when hitting EOF in standard xref table during trailer search

Description

References

• py-pdf/pypdf security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2026-119203 · ADVISORY
• py-pdf/pypdf#4289 · WEB
• py-pdf/pypdf commit 06593f9 · WEB
• py-pdf/pypdf · PACKAGE
• py-pdf/pypdf release 6.21.4 · WEB

Weitere Schwachstellen in pypdf

• CVE-2026-119204HOCHpypdf has possible large memory usage when parsing page tree
• CVE-2026-119205HOCHpypdf has possible infinite loop when cloning dictionaries
• CVE-2026-119206HOCHpypdf has possible long runtimes when retrieving page labels
• CVE-2026-119207HOCHpypdf has possible large memory usage for exceptions in strict mode
• CVE-2026-119208HOCHpypdf has possible long runtimes/large memory usage for encrypted PDF files