{"id":"CVE-2026-102998","published":"2026-09-30T21:17:07.177","lastModified":"2026-10-05T15:05:55.850","description":"pypdf is a free and open-source pure-python PDF library. Prior to 6.19.0, a crafted PDF with form field values can cause pypdf/generic/_appearance_stream.py appearance-stream generation to repeat invariant selection-data work inside a loop when an application updates fields with flattening enabled, resulting in excessive runtimes and application unavailability. This issue is fixed in version 6.19.0.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwes":["CWE-400"],"vendors":["pypdf project"],"products":["pypdf"],"references":[{"url":"https://github.com/py-pdf/pypdf/commit/959467a9b95be83e2dc5ae873ece5f371263ede7","tags":["Patch"]},{"url":"https://github.com/py-pdf/pypdf/pull/4087","tags":["Patch","Issue Tracking"]},{"url":"https://github.com/py-pdf/pypdf/releases/tag/6.19.0","tags":["Release Notes"]},{"url":"https://github.com/py-pdf/pypdf/security/advisories/GHSA-php9-fj8v-98fj","tags":["Vendor Advisory"]}],"exploitRefs":[{"url":"https://github.com/py-pdf/pypdf/commit/959467a9b95be83e2dc5ae873ece5f371263ede7","tags":["Patch"]},{"url":"https://github.com/py-pdf/pypdf/pull/4087","tags":["Patch","Issue Tracking"]},{"url":"https://github.com/py-pdf/pypdf/releases/tag/6.19.0","tags":["Release Notes"]},{"url":"https://github.com/py-pdf/pypdf/security/advisories/GHSA-php9-fj8v-98fj","tags":["Vendor Advisory"]}],"hasPoc":true,"ai":{"summary":"A denial-of-service vulnerability in pypdf allows attackers to craft malicious PDF files that cause excessive CPU usage and application unavailability when form fields are updated with flattening enabled. This affects applications using pypdf for PDF processing.","exploitability":"Exploitation is relatively straightforward as it requires only crafting a malicious PDF file with specific form field values, with no additional prerequisites needed beyond having an application that uses pypdf with flattening enabled.","blast_radius":"The vulnerability could impact any application that processes PDFs with form fields and uses pypdf version prior to 6.19.0, potentially causing widespread service unavailability when processing malicious PDFs.","remediation":"Upgrade to pypdf version 6.19.0 or later to remediate this denial-of-service vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["dos","pdf","python"],"model":"garnet-coder","analyzedAt":"2026-10-13T09:07:18.261Z"}}