Lucene search
+L

6 matches found

PyPA
PyPA
•added 2026/08/10 10:43 a.m.•39 views

pypdf: Possible long runtimes/large memory usage for large CID font width ranges

ImpactAn attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consumption. This requires parsing the font width entries of a font with unusually large values, for example during text extraction. PatchesThis has been fixed in pypdf==6.15.0. Workarounds...

4.8CVSS5.8AI score0.00125EPSS
SaveExploits0References8Affected Software1
osv_pysec
osv_pysec
•added 2026/08/10 10:43 a.m.•21 views

PYSEC-2026-3656 pypdf: Possible long runtimes/large memory usage for large CID font width ranges

Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consumption. This requires parsing the font width entries of a font with unusually large values, for example during text extraction. Patches This has been fixed in pypdf==6.15.0. Workaroun...

4.8CVSS5.7AI score0.00125EPSS
SaveExploits0References8
NVD
NVD
•added 2026/08/07 7:18 p.m.•28 views

CVE-2026-71852

pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause long runtimes and large memory consumption when pypdf/font.py function Font.collectcidcharacterwidths expands unusually large CID font /W width ranges or excessive width entries during text extractio...

4.8CVSS0.00125EPSS
SaveExploits0References4
osv_ghsa
osv_ghsa
•added 2026/08/07 6:54 p.m.•23 views

GHSA-FWG2-594C-JP42 pypdf: Possible long runtimes/large memory usage for large CID font width ranges

Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consumption. This requires parsing the font width entries of a font with unusually large values, for example during text extraction. Patches This has been fixed in pypdf==6.15.0. Workaroun...

4.8CVSS5.7AI score0.00125EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2026/08/07 6:54 p.m.•62 views

pypdf: Possible long runtimes/large memory usage for large CID font width ranges

Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consumption. This requires parsing the font width entries of a font with unusually large values, for example during text extraction. Patches This has been fixed in pypdf==6.15.0. Workaroun...

4.8CVSS5.8AI score0.00125EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2026/08/07 6:53 p.m.•59 views

CVE-2026-71852 pypdf: Possible long runtimes/large memory usage for large CID font width ranges

pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause long runtimes and large memory consumption when pypdf/font.py function Font.collectcidcharacterwidths expands unusually large CID font /W width ranges or excessive width entries during text extractio...

4.8CVSS0.00125EPSS
SaveExploits0References4
Rows per page
Query Builder