Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-36464
HistoryJun 27, 2023 - 10:15 p.m.

Design/Logic Flaw

2023-06-2722:15:00
PRIOn knowledge base
www.prio-n.com
4
pypdf
pdf library
infinite loop
vulnerability
pull request #1828
security patch
upgrade
nvd

5.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.5%

pypdf is an open source, pure-python PDF library. In affected versions an attacker may craft a PDF which leads to an infinite loop if __parse_content_stream is executed. That is, for example, the case if the user extracted text from such a PDF. This issue was introduced in pull request #969 and resolved in pull request #1828. Users are advised to upgrade. Users unable to upgrade may modify the line while peek not in (b"\r", b"\n") in pypdf/generic/_data_structures.py to while peek not in (b"\r", b"\n", b"").

CPENameOperatorVersion
pypdf2ge2.2.0
pypdflt3.9.0

5.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.5%