CVE-2026-71870 | py-pdf pypdf up to 6.14.x CMap Parsing pypdf/_cmap.py parse_bfrange memory allocation

August 7, 2026 Yanac

A vulnerability marked as problematic has been reported in py-pdf pypdf up to 6.14.x. This issue affects the function parse_bfrange of the file pypdf/_cmap.py of the component CMap Parsing. The manipulation leads to uncontrolled memory allocation.

This vulnerability is listed as CVE-2026-71870. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More