Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2023-46250

pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions 3.7.0 through 3.16.4 can craft a PDF which leads to an infinite loop. This infinite loop blocks the current process and can utilize a single core of the CPU by 100%. It does not affect memory usage. That is, for example, the case when the pypdf-user manipulates an incoming malicious PDF e.g. by merging it with another PDF or by adding annotations. The issue was fixed in version 3.17.0. As a workaround, apply the patch manually by modifying `pypdf/generic/_data_structures.py`.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 17.0%
CVSS Severity
CVSS v3 Score 5.1
Products affected by CVE-2023-46250
  • Py-Pdf » Pypdf » Version: 3.10.0
    cpe:2.3:a:py-pdf:pypdf:3.10.0
  • Py-Pdf » Pypdf » Version: 3.11.0
    cpe:2.3:a:py-pdf:pypdf:3.11.0
  • Py-Pdf » Pypdf » Version: 3.11.1
    cpe:2.3:a:py-pdf:pypdf:3.11.1
  • Py-Pdf » Pypdf » Version: 3.12.0
    cpe:2.3:a:py-pdf:pypdf:3.12.0
  • Py-Pdf » Pypdf » Version: 3.12.1
    cpe:2.3:a:py-pdf:pypdf:3.12.1
  • Py-Pdf » Pypdf » Version: 3.12.2
    cpe:2.3:a:py-pdf:pypdf:3.12.2
  • Py-Pdf » Pypdf » Version: 3.13.0
    cpe:2.3:a:py-pdf:pypdf:3.13.0
  • Py-Pdf » Pypdf » Version: 3.14.0
    cpe:2.3:a:py-pdf:pypdf:3.14.0
  • Py-Pdf » Pypdf » Version: 3.15.0
    cpe:2.3:a:py-pdf:pypdf:3.15.0
  • Py-Pdf » Pypdf » Version: 3.15.1
    cpe:2.3:a:py-pdf:pypdf:3.15.1
  • Py-Pdf » Pypdf » Version: 3.15.2
    cpe:2.3:a:py-pdf:pypdf:3.15.2
  • Py-Pdf » Pypdf » Version: 3.15.3
    cpe:2.3:a:py-pdf:pypdf:3.15.3
  • Py-Pdf » Pypdf » Version: 3.15.4
    cpe:2.3:a:py-pdf:pypdf:3.15.4
  • Py-Pdf » Pypdf » Version: 3.15.5
    cpe:2.3:a:py-pdf:pypdf:3.15.5
  • Py-Pdf » Pypdf » Version: 3.16.0
    cpe:2.3:a:py-pdf:pypdf:3.16.0
  • Py-Pdf » Pypdf » Version: 3.16.1
    cpe:2.3:a:py-pdf:pypdf:3.16.1
  • Py-Pdf » Pypdf » Version: 3.16.2
    cpe:2.3:a:py-pdf:pypdf:3.16.2
  • Py-Pdf » Pypdf » Version: 3.16.3
    cpe:2.3:a:py-pdf:pypdf:3.16.3
  • Py-Pdf » Pypdf » Version: 3.16.4
    cpe:2.3:a:py-pdf:pypdf:3.16.4
  • Py-Pdf » Pypdf » Version: 3.7.0
    cpe:2.3:a:py-pdf:pypdf:3.7.0
  • Py-Pdf » Pypdf » Version: 3.7.1
    cpe:2.3:a:py-pdf:pypdf:3.7.1
  • Py-Pdf » Pypdf » Version: 3.8.0
    cpe:2.3:a:py-pdf:pypdf:3.8.0
  • Py-Pdf » Pypdf » Version: 3.8.1
    cpe:2.3:a:py-pdf:pypdf:3.8.1
  • Py-Pdf » Pypdf » Version: 3.9.0
    cpe:2.3:a:py-pdf:pypdf:3.9.0
  • Py-Pdf » Pypdf » Version: 3.9.1
    cpe:2.3:a:py-pdf:pypdf:3.9.1


Products
Pricing
Contact Us

Shodan ® - All rights reserved