CVE-2026-102995

pypdf is a free and open-source pure-python PDF library. Prior to 6.18.1, a crafted PDF can place unusually large source-code or destination-string tokens in a font /ToUnicode mapping, causing pypdf/cmap.py parsebfchar to decode and retain oversized values during operations such as text extractio...

CVE-2026-102995

The pypdf pure-python PDF library is vulnerable to excessive memory consumption in versions prior to 6.18.1 . A crafted PDF can include unusually large source-code or destination-string tokens within a font /ToUnicode mapping. This causes the pypdf/_cmap.py parse_bfchar function to decode and ret...