CyberRota Analysis
AI-GeneratedThe pypdf library prior to version 6.19.0 is vulnerable to performance degradation when processing crafted PDFs with numerous embedded files, leading to excessive resource consumption and potential denial of service. Applications utilizing this library should prioritize upgrading to version 6.19.0 to mitigate the risk of prolonged runtimes and ensure efficient handling of PDF attachments. This vulnerability is particularly relevant for developers and organizations relying on pypdf for PDF manipulation in their applications.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
pypdf is a free and open-source pure-python PDF library. Prior to 6.19.0, a crafted PDF containing many embedded files can cause the dictionary-based attachments API in pypdf/_doc_common.py to reparse the full attachment list for each content lookup, producing repeated work and long runtimes when an application accesses the embedded-file mapping. This issue is fixed in version 6.19.0.
Related CVEs
Other vulnerabilities affecting the same vendor(s)