A flaw was found in pypdf. An attacker can cause a Denial of Service (DoS) by supplying a specially crafted PDF document containing a large number of embedded files. When an application accesses the attachment mapping, the library repeatedly reparses the entire attachment list for each lookup. This repetitive processing consumes excessive computational resources, leading to severe performance degradation and unresponsiveness.
Last checked: 2026-10-05 16:33 UTC
No exploitation evidence · CISA Coordinator (Assessed 2026-10-01 18:51 UTC)
Fix evidence last checked: 2026-10-10 18:48 UTC
Debian 12 (Bookworm)
Debian Security Tracker · Observed 2026-10-10