CVE-2026-27025 pypdf has possible long runtimes/large memory usage for large /ToUnicode streams

🗓️ 20 Feb 2026 21:11:20Reported by GoogleType

osv🔗 osv.dev👁 6 Views

CVE-2026-27025 in pypdf allows crafting a PDF to cause long runtimes and memory use in ToUnicode parsing; six seven one

Reporter	Title	Published	Views	Family All 31
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in pypdf-6.6.2-py3-none-any.whl	18 May 202619:32	–	ibm
Chainguard	CVE-2026-27025 vulnerabilities	20 Feb 202619:17	–	cgr
CNNVD	pypdf 安全漏洞	20 Feb 202600:00	–	cnnvd
CVE	CVE-2026-27025	20 Feb 202621:11	–	cve
Cvelist	CVE-2026-27025 pypdf has possible long runtimes/large memory usage for large /ToUnicode streams	20 Feb 202621:11	–	cvelist
Debian CVE	CVE-2026-27025	20 Feb 202621:11	–	debiancve
Github Security Blog	pypdf has possible long runtimes/large memory usage for large /ToUnicode streams	18 Feb 202622:41	–	github
NVD	CVE-2026-27025	20 Feb 202622:16	–	nvd
Tenable Nessus	openSUSE 16 Security Update : python-PyPDF2 (openSUSE-SU-2026:20333-1)	8 Mar 202600:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-27025	21 Feb 202600:00	–	nessus

Source	Link
github	www.github.com/py-pdf/pypdf/releases/tag/6.7.1
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/27xxx/CVE-2026-27025.json
github	www.github.com/py-pdf/pypdf/security/advisories/GHSA-wgvp-vg3v-2xq3
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-27025
github	www.github.com/py-pdf/pypdf/commit/77d7b8d7cfbe8dd179858dfa42666f73fc6e57a2
github	www.github.com/py-pdf/pypdf/pull/3646

10 Apr 2026 05:37Current

5.5Medium risk

Vulners AI Score5.5

CVSS 46.9

EPSS0.00006