Name of the Vulnerable Software and Affected Versions:

FPDI versions 2.6.2 and below

Description:

FPDI is a collection of PHP classes that facilitate reading pages from existing PDF documents and using them as templates in FPDF. A malicious PDF file can cause a server-side script to crash due to memory exhaustion, leading to a Denial of Service (DoS). Repeated attacks can lead to sustained service unavailability.

Recommendations:

Update to version 2.6.3 or later.