CyberRota Analysis
AI-GeneratedThe pypdf library is vulnerable to a denial-of-service condition due to improper handling of malformed PDF files, which can lead to excessive runtimes and application unavailability. This issue affects all versions prior to 6.18.1 and should be prioritized by developers and organizations using pypdf for PDF processing to mitigate potential disruptions in service. Users are strongly advised to upgrade to version 6.18.1 or later to address this vulnerability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
pypdf is a free and open-source pure-python PDF library. Prior to 6.18.1, a crafted PDF containing a partially malformed /FlateDecode stream with padded data can force pypdf/filters.py to use inefficient byte-by-byte decompression while the earlier recovery counter fails to advance for bytes that successfully decode, causing long runtimes and application unavailability. This is a residual issue after the malformed FlateDecode recovery fix. This issue is fixed in version 6.18.1.
Related CVEs
Other vulnerabilities affecting the same vendor(s)