CVE-2026-71852 | py-pdf pypdf up to 6.14.x Font pypdf/_font.py Font._collect_cid_character_widths memory allocation

August 7, 2026 Yanac

A vulnerability classified as problematic was found in py-pdf pypdf up to 6.14.x. This issue affects the function Font._collect_cid_character_widths of the file pypdf/_font.py of the component Font Handler. The manipulation results in uncontrolled memory allocation.

This vulnerability is reported as CVE-2026-71852. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More