Threats tagged 'brew-pdfly-cve-2026-33123'

CVE-2026-33123 is a medium severity vulnerability in the py-pdf pypdf library versions prior to 6.9.1. It allows an attacker to craft a malicious PDF that triggers uncontrolled resource consumption, causing long runtimes or excessive memory usage. Exploitation requires processing a specially crafted array-based stream with many entries, potentially leading to denial of service due to resource exhaustion. No authentication or user interaction is required, and the vulnerability affects systems that parse untrusted PDFs using vulnerable pypdf versions. The issue has been fixed in version 6.9.1. There are no known exploits in the wild currently.