CVE-2026-124553

The BabelDOC library (versions 0.3.61 before 0.7.0) is vulnerable to a resource exhaustion Denial of Service (DoS) via ToUnicode CMap Parsing . A remote attacker can submit a crafted PDF containing an embedded ToUnicode CMap with unbounded bfrange and cidrange spans . This triggers billions of lo...

CVE-2026-124553: funstory-ai BabelDOC: BabelDOC from 0.3.61 before 0.7.0 contains a resource exhaustion vulnerability that allows remote attackers to exhaust…

BabelDOC from 0.3.61 before 0.7.0 contains a resource exhaustion vulnerability that allows remote attackers to exhaust CPU and memory by supplying unbounded bfrange and cidrange spans. Attackers can submit a crafted PDF whose embedded ToUnicode CMap declares a huge range, driving billions of loop...

CVE-2026-71870 pypdf: Possible large memory usage for large /ToUnicode streams

pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause large memory consumption when pypdf/cmap.py function parsebfrange parses unusually large source-code or destination-string tokens in a font /ToUnicode CMap during text extraction. This issue is fixed...

EUVD-2026-54615

pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause large memory consumption when pypdf/cmap.py function parsebfrange parses unusually large source-code or destination-string tokens in a font /ToUnicode CMap during text extraction. This issue is fixed...

CVE-2026-71870

CVE-2026-71870 (pypdf) : Prior to 6.15.0, a crafted PDF can trigger extremely large memory use during text extraction when the font /ToUnicode CMap is parsed by pypdf/_cmap.py in parse_bfrange. This is a local, low-complexity issue that could lead to resource exhaustion; the advisory fixes it in ...

PT-2026-69128

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.15.0 Description A crafted PDF can cause excessive memory consumption during text extraction. This occurs when the parse bfrange function in pypdf/ cmap.py parses unusually large source-code or destination-string toke...

Excessive Iteration

Overview pypdf is an A pure-python PDF library capable of splitting, merging, cropping, and transforming PDF files Affected versions of this package are vulnerable to Excessive Iteration in the parsebfrange function in cmap.py. An attacker can cause excessive resource consumption by supplying a...