CyberRota Analysis
AI-GeneratedThe pypdf library prior to version 6.14.0 is vulnerable to denial-of-service attacks due to the processing of specially crafted PDFs containing malformed cross-reference streams, which can lead to excessive runtime while attempting to recover broken entries. This vulnerability poses a significant risk to applications utilizing pypdf for PDF handling, making it critical for developers and organizations relying on this library to prioritize upgrading to version 6.14.0 or later to mitigate potential service disruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
pypdf is a free and open-source pure-python PDF library. Prior to 6.14.0, an attacker can craft a PDF with repeated malformed cross-reference streams that cause pypdf to spend long runtimes recovering broken cross-reference table entries. This issue is fixed in version 6.14.0.
Related CVEs
Other vulnerabilities affecting the same vendor(s)