{"id":"CVE-2026-102994","published":"2026-09-30T20:17:28.080","lastModified":"2026-10-05T15:24:04.943","description":"pypdf is a free and open-source pure-python PDF library. Prior to 6.18.0, a crafted PDF containing indirect-object identifiers or generation-number tokens that continue for a long time without whitespace can cause pypdf/_reader.py and pypdf/generic/_base.py to scan excessive input through read_until_whitespace, resulting in long runtimes and application unavailability. This issue is fixed in version 6.18.0.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwes":["CWE-400","CWE-407"],"vendors":["pypdf project"],"products":["pypdf"],"references":[{"url":"https://github.com/py-pdf/pypdf/commit/82501d2993c6387833c4949d205caeb188f8bb9e","tags":["Patch"]},{"url":"https://github.com/py-pdf/pypdf/pull/4055","tags":["Patch","Issue Tracking"]},{"url":"https://github.com/py-pdf/pypdf/releases/tag/6.18.0","tags":["Release Notes"]},{"url":"https://github.com/py-pdf/pypdf/security/advisories/GHSA-5jq2-8x83-x246","tags":["Vendor Advisory"]}],"exploitRefs":[{"url":"https://github.com/py-pdf/pypdf/commit/82501d2993c6387833c4949d205caeb188f8bb9e","tags":["Patch"]},{"url":"https://github.com/py-pdf/pypdf/pull/4055","tags":["Patch","Issue Tracking"]},{"url":"https://github.com/py-pdf/pypdf/releases/tag/6.18.0","tags":["Release Notes"]},{"url":"https://github.com/py-pdf/pypdf/security/advisories/GHSA-5jq2-8x83-x246","tags":["Vendor Advisory"]}],"hasPoc":true,"ai":{"summary":"The pypdf library suffers from a denial-of-service vulnerability where specially crafted PDF files can cause excessive CPU and memory consumption during parsing, leading to application unavailability. This occurs when PDF files contain long sequences of indirect-object identifiers or generation numbers without whitespace, causing the parser to scan indefinitely.","exploitability":"Exploitation is relatively straightforward as it requires only sending a malformed PDF file to a vulnerable pypdf-based application, with no additional preconditions needed.","blast_radius":"The impact could be significant across any application that processes PDF files using pypdf versions prior to 6.18.0, potentially causing widespread service disruption in document processing systems.","remediation":"Upgrade to pypdf version 6.18.0 or later to remediate this denial-of-service vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["denial-of-service","pdf","memory-consumption","cpu"],"model":"garnet-coder","analyzedAt":"2026-10-13T09:08:27.462Z"}}