CVE-2026-102996 | py-pdf pypdf up to 6.18.0 Font Width Collection pypdf/_font.py Font._collect_tt_t1_character_widths memory allocation

September 30, 2026 Yanac

A vulnerability categorized as problematic has been discovered in py-pdf pypdf up to 6.18.0. This vulnerability affects the function Font._collect_tt_t1_character_widths of the file pypdf/_font.py of the component Font Width Collection. Such manipulation leads to uncontrolled memory allocation.

This vulnerability is listed as CVE-2026-102996. The attack may be performed from remote. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More