CVE-2026-71852 — pypdf: Possible long runtimes/large memory usage for large CID font width ranges
pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause long runtimes and large memory consumption when pypdf/_font.py function Font._c…
Published: 2026-08-07 · CVSS: 4.8 · CVSS 4.0
pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause long runtimes and large memory consumption when pypdf/_font.py function Font._collect_cid_character_widths expands unusually large CID font /W width ranges or excessive width entries during text extraction. This issue is fixed in 6.15.0.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7