GHSA-4vqv-7265-gm2w: pypdf has possible large memory usage for exceptions in strict mode

Severity: HIGH
CVE: CVE-2026-119207
Ecosystems: pip
Packages: pypdf

Written by

### Impact

An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires loading an invalid dictionary.

### Patches

This has been fixed in [pypdf==6.21.3](https://github.com/py-pdf/pypdf/releases/tag/6.21.3).

### Workarounds

If you cannot upgrade yet, consider applying the changes from PR [#4265](https://github.com/py-pdf/pypdf/pull/4265).

More posts