A flaw was found in pypdf. A remote attacker can exploit this vulnerability by providing a crafted PDF document containing a partially malformed FlateDecode data compression stream. When processing the malformed stream, the application triggers an inefficient recovery routine that consumes excessive processing time, potentially resulting in application unresponsiveness and a Denial of Service (DoS).
Last checked: 2026-10-02 19:43 UTC
No exploitation evidence · CISA Coordinator (Assessed 2026-10-02 16:33 UTC)
Fix evidence last checked: 2026-10-02 00:59 UTC