Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filter)
Description
Credits
-
koltiradw Reporter
-
stefan6419846 Analyst
koltiradw
Reporter
stefan6419846
Analyst
Impact
An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsing the content stream of a page with a not terminated inline image, as done when extracting the page text for example. It only affects the ASCII85 and ASCIIHex filters.
Patches
This has been fixed in pypdf==6.14.2.
Workarounds
If you cannot upgrade yet, consider applying the changes from PR #3892.