PT-2025-33102 · Pypi+1 · Pypdf+1

Published 2025-08-13 · Updated 2026-03-06 · CVE-2025-55197

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: pypdf versions prior to 6.0.0

Description: pypdf is a free and open-source pure-python PDF library. An attacker can craft a PDF file that leads to exhaustion of RAM. This requires only reading the file if a series of FlateDecode filters are used on a malicious cross-reference stream, and other content streams are affected on explicit access.

Recommendations: Update to pypdf version 6.0.0 or later. If an update is not possible, include the fixed code from pypdf.filters.decompress into the existing filters file.

Exploit

Fix

DoS

Allocation of Resources Without Limits

Resource Exhaustion

Weakness Enumeration

CWE-770

CWE-400

Related Identifiers

CVE-2025-55197

GHSA-7HFW-26VP-JP8M

OPENSUSE-SU-2025:15439-1

OPENSUSE-SU-2026:10238-1

OPENSUSE-SU-2026:20333-1

Affected Products

Debian

Pypdf

References · 34

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/55xxx/CVE-2025-55197.json · Exploit
• https://github.com/py-pdf/pypdf/pull/3430 · Patch
• https://osv.dev/vulnerability/GHSA-7hfw-26vp-jp8m · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-55197 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-55197 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-55197 · Security Note
• https://ubuntu.com/security/CVE-2025-55197 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-55197 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-55197 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-55197 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:10238-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15439-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:20333-1 · Vendor Advisory
• https://github.com/py-pdf/pypdf · Note
• https://github.com/py-pdf/pypdf/security/advisories/GHSA-7hfw-26vp-jp8m · Note