| Package | Affected versions | Patched versions |
|---|---|---|
| pypdf | < 6.14.0 | 6.14.0 |
| pypdf | < 6.14.0 | 6.14.0 |
An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires loading images where the declared size values are much too large compared to the actual data.
This has been fixed in pypdf==6.14.0.
If you cannot upgrade yet, consider applying the changes from PR #3888.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free