A flaw was found in pypdf. An attacker can provide a specially crafted PDF document containing unusually large Roman numeral page labels. When an application retrieves these page labels, the library generates excessively large numeral strings, resulting in substantial memory consumption and a potential Denial of Service (DoS).
Last checked: 2026-10-02 19:43 UTC
No exploitation evidence · CISA Coordinator (Assessed 2026-10-02 16:31 UTC)
Fix evidence last checked: 2026-10-03 02:26 UTC
Debian 12 (Bookworm)
Debian Security Tracker · Observed 2026-10-03