Résumé
pypdf: Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filter)
Détails de l’avis
Impact
An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsing the content stream of a page with a not terminated inline image, as done when extracting the page text for example. It only affects the ASCII85 and ASCIIHex filters.
Patches
This has been fixed in pypdf==6.14.2.
Workarounds
If you cannot upgrade yet, consider applying the changes from PR #3892.
Références
- https://github.com/advisories/GHSA-g867-7843-wf8q
- https://github.com/py-pdf/pypdf/security/advisories/GHSA-g867-7843-wf8q
- https://nvd.nist.gov/vuln/detail/CVE-2026-59935
- https://github.com/py-pdf/pypdf/pull/3892
- https://github.com/py-pdf/pypdf/commit/5a33a46416aa1ae6c025ff90a3cca57631fdafd2
- https://github.com/py-pdf/pypdf/releases/tag/6.14.2
Vulnérabilités liées
Tout Supply chain →- HIGHCVE-2026-61556
LiquidJS has an infinite loop vulnerability in its `strip_html` filter
- MEDIUMCVE-2026-84309
pypdf: Possible infinite loop for TreeObject.insert_child
- HIGHCVE-2026-54623
django CMS: Plugin move endpoint allows cyclic reparenting (DoS)
- HIGHCVE-2026-63202
netty-incubator-codec-ohttp BinaryHttpParser: Unauthenticated CPU-exhaustion DoS via infinite loop in field-section decoding
- HIGHCVE-2026-63124
netty-incubator-codec-ohttp: Binary HTTP parser infinite loop on known-length field section boundary
- MEDIUMCVE-2026-71436
Mermaid XY Charts are vulnerable to an infinite loop DoS