pypdf Infinite Loop Vulnerability in PDF Processing

A vulnerability allowing for an infinite loop has been identified in the pypdf library, versions prior to 6.9.2. This issue arises when a PDF file is read in non-strict mode, allowing an attacker to craft a file that triggers the loop. The vulnerability has been patched in version 6.9.2.

Impact

Exploitation of this vulnerability leads to an infinite loop during PDF processing, causing a denial of service condition.

Remediation

Users can upgrade to pypdf version 6.9.2 or apply the changes from the patch manually. Instructions for downloading version 6.9.2 are available on the pypdf GitHub releases page.