EUVD-2026-54615

pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause large memory consumption when pypdf/cmap.py function parsebfrange parses unusually large source-code or destination-string tokens in a font /ToUnicode CMap during text extraction. This issue is fixed...

PT-2026-69128

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.15.0 Description A crafted PDF can cause excessive memory consumption during text extraction. This occurs when the parse bfrange function in pypdf/ cmap.py parses unusually large source-code or destination-string toke...

Excessive Iteration

Overview pypdf is an A pure-python PDF library capable of splitting, merging, cropping, and transforming PDF files Affected versions of this package are vulnerable to Excessive Iteration in the parsebfrange function in cmap.py. An attacker can cause excessive resource consumption by supplying a...