CVE-2026-84309— pypdf: Possible infinite loop for TreeObject.insert_child
Quick assessment
Affected
py-pdf pypdf
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
pypdf 是一个免费且开源的纯 Python PDF 处理库。在 6.16.0 版本之前，攻击者可以构造一个具有循环树结构的 PDF 文件，导致 中的 方法在写入代码路径插入子节点时，无限跟随 链接，从而引发死循环（无限循环）。该问题已在 6.16.0 版本中修复。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-84309
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
pypdf: Possible infinite loop for TreeObject.insert_child
Source: CVE Program / CVE List V5
Vulnerability Description
pypdf is a free and open-source pure-python PDF library. Prior to 6.16.0, an attacker can craft a PDF whose cyclic tree structure causes pypdf/generic/_data_structures.py TreeObject.insert_child to follow /Next links indefinitely when a writing code path inserts a child, producing an infinite loop. This issue is fixed in version 6.16.0.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
不可达退出条件的循环(无限循环)
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-84309
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-84309
请登录查看更多情报信息。
Other References for CVE-2026-84309 (4)
-
https://github.com/py-pdf/pypdf/pull/3964 x_refsource_MISC
-
https://github.com/py-pdf/pypdf/releases/tag/6.16.0 x_refsource_MISC
-
https://github.com/py-pdf/pypdf/security/advisories/GHSA-jp53-mhqp-8xcg x_refsource_CONFIRM
Same Patch Batch · py-pdf · 2026-09-01 · 3 CVEs total
| CVE-2026-84310 | 4.8 MEDIUM | pypdf: Possible long runtimes/large memory usage when retrieving outlines |
| CVE-2026-84311 | 4.8 MEDIUM | pypdf: Possible long runtimes/large memory usage when extracting XForm objects |
IV. Related Vulnerabilities
Same product: pypdf
-
CVE-2026-84311
pypdf: Possible long runtimes/large memory usage when extrac -
CVE-2026-84310
pypdf: Possible long runtimes/large memory usage when retrie -
CVE-2026-82398
pypdf: Inefficient handling of non-whitespace inputs in read -
CVE-2026-71870
pypdf: Possible large memory usage for large /ToUnicode stre -
CVE-2026-71852
pypdf: Possible long runtimes/large memory usage for large C
Same vendor: py-pdf
-
CVE-2026-84311
pypdf: Possible long runtimes/large memory usage when extrac -
CVE-2026-84310
pypdf: Possible long runtimes/large memory usage when retrie -
CVE-2026-82398
pypdf: Inefficient handling of non-whitespace inputs in read -
CVE-2026-71870
pypdf: Possible large memory usage for large /ToUnicode stre -
CVE-2026-71852
pypdf: Possible long runtimes/large memory usage for large C
Same weakness: CWE-835
-
CVE-2026-82605
BareBones BBEdit Lasso Language Tokenizer infinite loop -
CVE-2026-82579
AshAi tool loop never terminates when all tool calls are fil -
CVE-2025-10903
Loop with Unreachable Exit Condition ('Infinite Loop') in Gi -
CVE-2026-78250
bytebot-ai bytebot Agent Execution Workflow infinite loop -
CVE-2026-45271
picotls has infinite recursion in the minicrypto ASN.1 decod
V. Comments for CVE-2026-84309
No comments yet