CyberRota Analysis
AI-GeneratedThe pypdf library, prior to version 6.16.1, is vulnerable to a denial-of-service attack due to inefficient handling of document outlines, which can lead to excessive memory consumption and prolonged runtimes when processing complex PDFs. This vulnerability could be exploited by an attacker to degrade application performance or crash services relying on the library. Organizations using pypdf for PDF processing should prioritize upgrading to version 6.16.1 to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
pypdf is a free and open-source pure-python PDF library. Prior to 6.16.1, an attacker can craft a PDF that causes pypdf/_doc_common.py _get_outline to consume long runtimes and large amounts of memory when retrieving document outlines with large numbers of entries or deeply nested reused paths because the traversal lacked global entry-count and nesting-depth limits. This issue is fixed in version 6.16.1.