CyberRota Analysis
AI-GeneratedThe pypdf library prior to version 6.14.1 is vulnerable to an infinite loop caused by a crafted PDF containing an improperly terminated inline image, which can lead to denial of service during text extraction. Organizations using this library for PDF processing should prioritize updating to version 6.14.1 to mitigate the risk of exploitation that could disrupt services. This vulnerability is particularly critical for developers and companies relying on pypdf for document handling in their applications.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
pypdf is a free and open-source pure-python PDF library. Prior to 6.14.1, an attacker can craft a PDF with a page content stream containing a not terminated inline image, causing an infinite loop during inline image end marker detection such as when extracting page text. This issue is fixed in version 6.14.1.
Related CVEs
Other vulnerabilities affecting the same vendor(s)