The vulnerability in pypdf versions before 6.10.2 allows an attacker to craft a malicious PDF containing an image with a /FlateDecode filter and an excessively large size value. When processed, this causes the library to allocate excessive amounts of memory, potentially exhausting system RAM. This is classified under CWE-789 (Memory Allocation with Excessive Size Value). The issue is resolved in pypdf 6.10.2, and users can mitigate by upgrading or manually applying the patch changes.

Successful exploitation can cause denial of service by exhausting system memory when parsing crafted PDFs. There is no indication of code execution or data corruption. The impact is limited to resource exhaustion leading to potential application or system instability.

Upgrade pypdf to version 6.10.2 or later, where the vulnerability is fixed. Alternatively, manually apply the patch changes provided by the vendor. Since this is a library vulnerability, ensure that any software using affected pypdf versions is updated accordingly. No other specific mitigations are indicated.