CVE-2023-36464

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 3.9.0

Description The issue is related to the execution of parse content stream which can lead to an infinite loop if a crafted PDF is used. This can occur, for example, when a user extracts text from such a PDF. The infinite loop can block the current process and utilize a single core of the CPU by 100%. It does not affect memory usage.

Recommendations For versions prior to 3.9.0, upgrade to pypdf>=3.9.0 to resolve the issue. If you cannot update your version of pypdf, modify the line while peek not in (b"r", b" ") in pypdf/generic/ data structures.py to while peek not in (b"r", b" ", b"").