Home › CVE Intelligence › CVE-2026-59935
CVSS 7.5 HIGH Vulnerability

CVE-2026-59935: pypdf: Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filt…

Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsing the content stream of a page with a not terminated inline image, as done when extracting the page tex…

7.5CVSS Score
HIGHSeverity
NOCISA KEV
0.4%EPSS Score
VulnerabilityImpact Type

📋 Vulnerability Details

CVE IDCVE-2026-59935
Vendorpip
Affected Productpypdf
Vulnerability TypeVulnerability
CVSS Score7.5 (HIGH)
EPSS Score0.4% probability of exploitation in the next 30 days
Actively Exploited❌ No known exploitation
Patch StatusSee Vendor Advisory →
Reported ByCYBERDUDEBIVASH SENTINEL APEX Intelligence (via github_advisories)

🔬 Technical Analysis

#

Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsing the content stream of a page with a not terminated inline image, as done when extracting the page text for example. It only affects the ASCII85 and ASCIIHex filters.

Patches This has been fixed in [pypdf==6.14.2](https://github.com/py-pdf/pypdf/releases/tag/6.14.2).

Workarounds If you cannot upgrade yet, consider applying the changes from PR [#3892](https://github.com/py-pdf/pypdf/pull/3892).

🎯 Known Indicators of Compromise

{"type":"url","value":"https://github.com/py-pdf/pypdf/releases/tag/6.14.2).","confidence_score":0.82,"first_seen":"2026-07-23","source_count":1} {"type":"url","value":"https://github.com/py-pdf/pypdf/pull/3892).","confidence_score":0.82,"first_seen":"2026-07-23","source_count":1}

📚 Advisory References

⚡ DETECTION RULES AVAILABLE

Get CVE-2026-59935 Detection Pack

Sigma rules, YARA signatures, IOC table, and SIEM queries for Splunk, Elastic, Sentinel, and Chronicle — deployable in 5 minutes.

✓ Sigma Rules ✓ YARA Pack ✓ IOC Table ✓ SIEM Queries
🛡️ Get Detection Pack → 🔌 Access via API →

🔗 Related Intelligence