CVE-2026-57254
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
There is an abnormal annotation within the PDF that is referenced by other objects. When the application parses the PDF, it fails to perform proper type checking, ultimately causing the application to crash.
Risk Assessment
An attacker can supply a specially crafted PDF file that, when opened, crashes the application, potentially leading to denial of service (DoS) in a production environment.
Recommendation
It is recommended to immediately update the library to the latest patched version and implement type validation during PDF processing.
Other vulnerabilities in PDF Library
See all- CVE-2026-57245High
When opening a PDF, the application fails to validate abnormal annotation relationships and field combinations related to hyperlinks, causing internal objects to enter an invalid state. During destruction, an invalid pointer write occurs, crashing the application.
- CVE-2026-13126High
Embedded JavaScript in a PDF file deleted pages, invalidating the object. The application attempted a write operation on invalid pop-up annotations, causing a crash.
Original NVD description (English source)
There is an abnormal annotation within the PDF that is referenced by other objects. When the application parses the PDF, it fails to perform proper type checking, ultimately causing the application to crash.