Pypi · Pypdf · CVE-2023-36464
**Name of the Vulnerable Software and Affected Versions**
pypdf versions prior to 3.9.0
**Description**
The issue is related to the execution of ` parse content stream` which can lead to an infinite loop if a crafted PDF is used. This can occur, for example, when a user extracts text from such a PDF. The infinite loop can block the current process and utilize a single core of the CPU by 100%. It does not affect memory usage.
**Recommendations**
For versions prior to 3.9.0, upgrade to `pypdf>=3.9.0` to resolve the issue.
If you cannot update your version of pypdf, modify the line `while peek not in (b"r", b"
")` in `pypdf/generic/ data structures.py` to `while peek not in (b"r", b"
", b"")`.