CVE-2026-102995

Summary

The pypdf library is vulnerable to a memory exhaustion attack through crafted PDF files that contain oversized font mapping tokens in the /ToUnicode table. This allows attackers to cause excessive memory consumption during text extraction operations, potentially leading to denial of service.

Exploitability

Exploitation is relatively straightforward as it requires only a specially crafted PDF file with oversized tokens in font mapping tables, with no user interaction or authentication required.

Blast radius

The impact could be significant across any system using pypdf for PDF text extraction, particularly web applications processing untrusted PDF uploads, potentially causing widespread service disruption.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to pypdf version 6.18.1 or later to address this memory exhaustion vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.