Skip to content
CVE PROGRAM SOURCE RECORD4.8 Medium

CVE-2026-71852

pypdf: Possible long runtimes/large memory usage for large CID font width ranges

Description

pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause long runtimes and large memory consumption when pypdf/_font.py function Font._collect_cid_character_widths expands unusually large CID font /W width ranges or excessive width entries during text extraction. This issue is fixed in 6.15.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

py-pdf pypdf

  • < 6.15.0affected

References