EUVD-2026-54600

pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause long runtimes and large memory consumption when pypdf/font.py function Font.collectcidcharacterwidths expands unusually large CID font /W width ranges or excessive width entries during text extractio...

CVE-2026-71852

pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause long runtimes and large memory consumption when pypdf/font.py function Font.collectcidcharacterwidths expands unusually large CID font /W width ranges or excessive width entries during text extractio...

CVE-2026-71852 pypdf: Possible long runtimes/large memory usage for large CID font width ranges

pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause long runtimes and large memory consumption when pypdf/font.py function Font.collectcidcharacterwidths expands unusually large CID font /W width ranges or excessive width entries during text extractio...

Linux Distros Unpatched Vulnerability : CVE-2026-71852

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause long runtimes and large memory consumption when pypdf/font.py...

CLSA-2026-1784077473 TuxCare security update for pypdf (1 CVE)

TuxCare rebuilt pypdf to address 1 CVE. Fixed in 5.9.0.post11+tuxcare...

CLSA-2026-1783472549 TuxCare security update for pypdf (2 CVEs)

TuxCare rebuilt pypdf to address 2 CVEs. Fixed in 5.9.0.post10+tuxcare...

CLSA-2026-1783386116 TuxCare security update for pypdf (2 CVEs)

TuxCare rebuilt pypdf to address 2 CVEs. Fixed in 5.9.0.post9+tuxcare...

CLSA-2026-1782954024 TuxCare security update for pypdf (1 CVE)

TuxCare rebuilt pypdf to address 1 CVE. Fixed in 5.9.0.post8+tuxcare...

CLSA-2026-1782867587 TuxCare security update for pypdf (2 CVEs)

TuxCare rebuilt pypdf to address 2 CVEs. Fixed in 5.9.0.post7+tuxcare...

CLSA-2026-1781571261 TuxCare security update for pypdf (3 CVEs)

TuxCare rebuilt pypdf to address 3 CVEs. Fixed in 5.9.0.post6+tuxcare...

CLSA-2026-1781225618 TuxCare security update for pypdf (1 CVE)

TuxCare rebuilt pypdf to address 1 CVE. Fixed in 5.9.0.post5+tuxcare...

CLSA-2026-1778460294 TuxCare security update for pypdf (1 CVE)

TuxCare rebuilt pypdf to address 1 CVE. Fixed in 5.9.0.post4+tuxcare...

CLSA-2025-1759968741 TuxCare security update for pypdf (1 CVE)

TuxCare rebuilt pypdf to address 1 CVE. Fixed in 5.9.0.post1+tuxcare...

CLSA-2025-1765930342 TuxCare security update for pypdf (1 CVE)

TuxCare rebuilt pypdf to address 1 CVE. Fixed in 5.9.0.post2+tuxcare...

CLSA-2025-1766103143 TuxCare security update for pypdf (1 CVE)

TuxCare rebuilt pypdf to address 1 CVE. Fixed in 5.9.0.post3+tuxcare...

pypdf: Possible infinite loop for not terminated inline images

ImpactAn attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsing the content stream of a page with a not terminated inline image, as done when extracting the page text for example. PatchesThis has been fixed in pypdf==6.14.1. WorkaroundsIf you...

pypdf: Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filter)

ImpactAn attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsing the content stream of a page with a not terminated inline image, as done when extracting the page text for example. It only affects the ASCII85 and ASCIIHex filters. PatchesThis ha...

PYSEC-2026-3610 pypdf: Possible long runtimes for repeated malformed cross-reference entries

Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires cross-reference streams with repeated malformed cross-reference streams. Patches This has been fixed in pypdf==6.14.0. Workarounds If you cannot upgrade yet, consider applying the changes fr...

pypdf: Possible long runtimes for repeated malformed cross-reference entries

ImpactAn attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires cross-reference streams with repeated malformed cross-reference streams. PatchesThis has been fixed in pypdf==6.14.0. WorkaroundsIf you cannot upgrade yet, consider applying the changes from ...

pypdf: Possible large memory usage for wrong image dimensions

ImpactAn attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires loading images where the declared size values are much too large compared to the actual data. PatchesThis has been fixed in pypdf==6.14.0. WorkaroundsIf you cannot upgrade yet, consider...