CVE-2025-55197

CVE-2025-55197 is a high-severity denial-of-service vulnerability affecting pypdf versions prior to 6.0.0. An unauthenticated attacker can craft a malicious PDF file that, when read, exhausts the system's RAM, leading to service disruption. The vulnerability has a CVSS score of 7.5 and is easily exploitable with low attack complexity, requiring no user interaction. While no public exploits or active exploitation have been observed, the potential for a denial-of-service attack is significant. Organizations using affected pypdf versions should update to 6.0.0 or implement the provided workaround to mitigate this risk.