A flaw was found in pypdf. By supplying a specially crafted PDF file containing unusually large alphabetical page-label values, a remote attacker can trigger excessive memory allocation when an application retrieves document page labels. This uncontrolled memory consumption can cause the application to crash or become unresponsive, resulting in a Denial of Service (DoS).
Last checked: 2026-10-01 04:41 UTC
No exploitation evidence · CISA Coordinator (Assessed 2026-09-30 20:49 UTC)
Fix evidence last checked: 2026-10-03 02:26 UTC
Debian 12 (Bookworm)
Debian Security Tracker · Observed 2026-10-03