{"uuid": "9081c8bf-5c6a-4639-8f36-aadbef666cdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102995", "type": "seen", "source": "https://t.me/pphm_HackerNews/3447", "content": "\ud83d\udd34 CVE-2026-102995\n\npypdf is a free and open-source pure-python PDF library. Prior to 6.18.1, a crafted PDF can place unusually large source-code or destination-string tokens in a font /ToUnicode mapping, causing pypdf/_cmap.py parse_bfchar to decode and retain oversized values during operations such as text extraction and consume excessive memory. This is a second follow-up to earlier /ToUnicode resource-consumption fixes and is limited to the remaining token-length path. This issue is fixed in version 6.18.1.", "creation_timestamp": "2026-10-05T17:10:07.000000Z"}