CVE-2026-84309 | py-pdf pypdf up to 6.15.x TreeObject _data_structures.py TreeObject.insert_child infinite loop

September 1, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in py-pdf pypdf up to 6.15.x. The affected element is the function TreeObject.insert_child of the file pypdf/generic/_data_structures.py of the component TreeObject. This manipulation causes infinite loop.

The identification of this vulnerability is CVE-2026-84309. It is possible to initiate the attack remotely. There is no exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More