AUGUST 16, 2026
Live Feed
Back to database
Case File

CVE-2026-71852

MEDIUM · CVSS 4.8 EPSS 0.13% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-08-07 · Last synced 2026-08-16

CyberRota Analysis

AI-Generated

The pypdf library is vulnerable to excessive memory consumption and prolonged runtimes when processing specially crafted PDF files, particularly due to the handling of large CID font width ranges in the Font._collect_cid_character_widths function. This could lead to denial-of-service conditions in applications utilizing the library. Developers and organizations using versions prior to 6.15.0 should prioritize upgrading to mitigate potential performance impacts.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗ github.com ↗ github.com ↗ github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-71852
Severity
MEDIUM
CVSS
4.8
EPSS
0.13%

Original NVD Description

pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause long runtimes and large memory consumption when pypdf/_font.py function Font._collect_cid_character_widths expands unusually large CID font /W width ranges or excessive width entries during text extraction. This issue is fixed in 6.15.0.