AUGUST 16, 2026
Live Feed
Back to database
Case File

CVE-2026-71870

MEDIUM · CVSS 4.8 EPSS 0.13% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-08-07 · Last synced 2026-08-16

CyberRota Analysis

AI-Generated

The pypdf library prior to version 6.15.0 is vulnerable to a denial-of-service condition due to excessive memory consumption when processing specially crafted PDFs, particularly during the parsing of large font CMap tokens. This could lead to application crashes or performance degradation during text extraction. Developers and organizations using pypdf for PDF processing should prioritize upgrading to version 6.15.0 to mitigate this risk.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗ github.com ↗ github.com ↗ github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-71870
Severity
MEDIUM
CVSS
4.8
EPSS
0.13%

Original NVD Description

pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause large memory consumption when pypdf/_cmap.py function parse_bfrange parses unusually large source-code or destination-string tokens in a font /ToUnicode CMap during text extraction. This issue is fixed in 6.15.0.