Impact
An attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires a call to read_until_whitespace with an input which does not have whitespace for a long time.
Patches
This has been fixed in pypdf==6.15.0.
Workarounds
If you cannot upgrade yet, consider applying the changes from PR #3947.
arpitjain099 Reporter
Impact
An attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires a call to
read_until_whitespacewith an input which does not have whitespace for a long time.Patches
This has been fixed in pypdf==6.15.0.
Workarounds
If you cannot upgrade yet, consider applying the changes from PR #3947.