pypdf is a free and open-source pure-python PDF library. Prior to version 6.1.3, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsing the content stream of a page which has an inline image using the DCTDecode filter. This has been fixed in pypdf version 6.1.3.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
No data.
Advisories
| Source | ID | Title |
|---|---|---|
 Github GHSA |
GHSA-vr63-x8vc-m265 | pypdf possibly loops infinitely when reading DCT inline images without EOF marker |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Wed, 22 Oct 2025 21:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | pypdf is a free and open-source pure-python PDF library. Prior to version 6.1.3, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsing the content stream of a page which has an inline image using the DCTDecode filter. This has been fixed in pypdf version 6.1.3. | |
| Title | pypdf affected by possible infinite loop when reading DCT inline images without EOF marker | |
| Weaknesses | CWE-834 | |
| References |
| |
| Metrics |
cvssV4_0
|
MITRE
Status: PUBLISHED
Assigner: GitHub_M
Published:
Updated: 2025-10-22T21:36:32.754Z
Reserved: 2025-10-20T19:41:22.739Z
Link: CVE-2025-62707
Vulnrichment
No data.
NVD
Status : Received
Published: 2025-10-22T22:15:35.707
Modified: 2025-10-22T22:15:35.707
Link: CVE-2025-62707
Redhat
No data.
OpenCVE Enrichment
No data.