CVE-2026-102995 | py-pdf pypdf up to 6.18.0 ToUnicode Mapping pypdf/_cmap.py parse_bfchar memory allocation

September 30, 2026 Yanac

A vulnerability was found in py-pdf pypdf up to 6.18.0. It has been rated as problematic. This affects the function parse_bfchar of the file pypdf/_cmap.py of the component ToUnicode Mapping. This manipulation causes uncontrolled memory allocation.

This vulnerability is tracked as CVE-2026-102995. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More