CVE-2026-71852

ADVISORY - github

Summary

Impact

An attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consumption. This requires parsing the font width entries of a font with unusually large values, for example during text extraction.

Patches

This has been fixed in pypdf==6.15.0.

Workarounds

If you cannot upgrade yet, consider applying the changes from PR #3946.

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-834⁠

Excessive Iteration

ADVISORY - github

CWE-834⁠

Excessive Iteration

ADVISORY - redhat

CWE-1050⁠

Excessive Platform Resource Consumption within a Loop

Impacted images

Advisories

Sign in to Docker Scout

See which of your images are affected by this CVE and how to fix them by signing into Docker Scout.