Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| py-pdf | pypdf | affected |
|
No data.
No data available yet.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2023-2830 | pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions 3.7.0 through 3.16.4 can craft a PDF which leads to an infinite loop. This infinite loop blocks the current process and can utilize a single core of the CPU by 100%. It does not affect memory usage. That is, for example, the case when the pypdf-user manipulates an incoming malicious PDF e.g. by merging it with another PDF or by adding annotations. The issue was fixed in version 3.17.0. As a workaround, apply the patch manually by modifying `pypdf/generic/_data_structures.py`. |
 Github GHSA |
GHSA-wjcc-cq79-p63f | Possible Infinite Loop when PdfWriter(clone_from) is used with a PDF |
Mon, 02 Nov 2026 16:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Py-pdf
Py-pdf pypdf |
|
| CPEs | cpe:2.3:a:py-pdf:pypdf:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Pypdf Project
Pypdf Project pypdf |
Py-pdf
Py-pdf pypdf |
MITRE
Status: PUBLISHED
Assigner: GitHub_M
Published:
Updated: 2024-09-05T18:54:52.306Z
Reserved: 2023-10-19T20:34:00.948Z
Link: CVE-2023-46250
Vulnrichment
Updated: 2024-08-02T20:37:40.140Z
NVD
Status : Modified
Published: 2023-10-31T16:15:09.930
Modified: 2026-11-02T16:06:04.477
Link: CVE-2023-46250
Redhat
No data.
OpenCVE Enrichment
No data.
-
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')