CyberRota Analysis
AI-GeneratedThe pypdf library prior to version 6.19.0 is vulnerable to a denial-of-service condition caused by crafted PDFs that can lead to excessive processing times when updating form fields with flattening enabled. This vulnerability can result in application unavailability, making it critical for developers and organizations utilizing pypdf for PDF processing to prioritize upgrading to the patched version. Immediate action is recommended to mitigate potential disruptions in service.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
pypdf is a free and open-source pure-python PDF library. Prior to 6.19.0, a crafted PDF with form field values can cause pypdf/generic/_appearance_stream.py appearance-stream generation to repeat invariant selection-data work inside a loop when an application updates fields with flattening enabled, resulting in excessive runtimes and application unavailability. This issue is fixed in version 6.19.0.
Related CVEs
Other vulnerabilities affecting the same vendor(s)