Most recent entries from all

BREW-gptme-CVE-2026-27025 — pypdf has possible long runtimes/large memory usage for large /ToUnicode streams

2026-10-03T22:04:04.759539+00:00

Affected: Homebrew: gptme

### Impact

An attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consumption. This requires parsing the `/ToUnicode` entry of a font with unusually large values, for example during text extraction.

### Patches

This has been fixed in [pypdf==6.7.1](https://github.com/py-pdf/pypdf/releases/tag/6.7.1).

### Workarounds

If you cannot upgrade yet, consider applying the changes from PR [#3646](https://github.com/py-pdf/pypdf/pull/3646).

CVE-2026-27025 — pypdf has possible long runtimes/large memory usage for large /ToUnicode streams

2026-10-03T22:04:04.759669+00:00

Affected: py-pdf pypdf

pypdf is a free and open-source pure-python PDF library. Prior to 6.7.1, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consumption. This requires parsing the /ToUnicode entry of a font with unusually large values, for example during text extraction. This vulnerability is fixed in 6.7.1.

GHSA-wgvp-vg3v-2xq3 — pypdf has possible long runtimes/large memory usage for large /ToUnicode streams

2026-10-03T22:04:04.759723+00:00

Affected: PyPI: pypdf

### Impact

### Patches

This has been fixed in [pypdf==6.7.1](https://github.com/py-pdf/pypdf/releases/tag/6.7.1).

### Workarounds

If you cannot upgrade yet, consider applying the changes from PR [#3646](https://github.com/py-pdf/pypdf/pull/3646).