CVE-2026-71852

Published: Ago 07, 2026 Last Modified: Ago 07, 2026
ExploitDB:
Other exploit source:
Google Dorks:
MEDIUM 4,8
Source: [email protected]
Attack Vector: local
Attack Complexity: low
Privileges Required: none
User Interaction: passive
Confidentiality: N/A
Integrity: N/A
Availability: N/A

Description

AI Translation Available

pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause long runtimes and large memory consumption when pypdf/_font.py function Font._collect_cid_character_widths expands unusually large CID font /W width ranges or excessive width entries during text extraction. This issue is fixed in 6.15.0.

834

Excessive Iteration

Incomplete
Abstraction: Class Structure: Simple
Common Consequences
Security Scopes Affected:
Availability
Potential Impacts:
Dos: Resource Consumption (Cpu) Dos: Resource Consumption (Memory) Dos: Amplification Dos: Crash, Exit, Or Restart
Applicable Platforms
All platforms may be affected
View CWE Details
https://github.com/py-pdf/pypdf/commit/51cb6acf9e8a35b77e90…
https://github.com/py-pdf/pypdf/commit/51cb6acf9e8a35b77e90b4d87d28fe3e1416d7d7
https://github.com/py-pdf/pypdf/pull/3946
https://github.com/py-pdf/pypdf/pull/3946
https://github.com/py-pdf/pypdf/releases/tag/6.15.0
https://github.com/py-pdf/pypdf/releases/tag/6.15.0
https://github.com/py-pdf/pypdf/security/advisories/GHSA-fw…
https://github.com/py-pdf/pypdf/security/advisories/GHSA-fwg2-594c-jp42