CVE-2026-27025 — Vulnetix

CVE-2026-27025 PUBLISHED CVSS 6.900000095367432 MEDIUM

pypdf is a free and open-source pure-python PDF library. Prior to 6.7.1, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consumption. This requires parsing the /ToUnicode entry of a font with unusually large values, for example during text extraction. This vulnerability is fixed in 6.7.1.

EPSS 0.01% · 0.3th percentile

Risk Scores

CVSS 4.0

6.900000095367432

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

EPSS Score

0.01%

0.3th percentile

Affected Products

Vendor	Product	Versions
PyPI	pypdf	0
py-pdf	pypdf	< 6.7.1
pypdf_project	pypdf	0

Exploit Intelligence

https://github.com/py-pdf/pypdf/security/advisories/GHSA-wgvp-vg3v-2xq3 (circl)
https://github.com/py-pdf/pypdf/pull/3646 (circl)
https://github.com/py-pdf/pypdf/commit/77d7b8d7cfbe8dd179858dfa42666f73fc6e57a2 (circl)
https://github.com/py-pdf/pypdf/releases/tag/6.7.1 (circl)

Timeline

Feb 18, 2026 CVE Published
Feb 21, 2026 EPSS Score
Feb 23, 2026 CVE Updated
Feb 23, 2026 EPSS Score
Feb 24, 2026 EPSS Score
Feb 26, 2026 EPSS Score
Feb 28, 2026 EPSS Score
Mar 1, 2026 EPSS Score
Mar 3, 2026 EPSS Score
Mar 5, 2026 EPSS Score
Mar 6, 2026 EPSS Score
Mar 8, 2026 EPSS Score

References

https://github.com/py-pdf/pypdf/security/advisories/GHSA-wgvp-vg3v-2xq3 url
https://github.com/py-pdf/pypdf/pull/3646 url
https://github.com/py-pdf/pypdf/commit/77d7b8d7cfbe8dd179858dfa42666f73fc6e57a2 url
https://github.com/py-pdf/pypdf/releases/tag/6.7.1 url
https://nvd.nist.gov/vuln/detail/CVE-2026-27025 advisory
https://github.com/py-pdf/pypdf package
https://www.ibm.com/support/pages/node/7268726 advisory
https://www.ibm.com/support/pages/node/7268602 advisory
https://www.ibm.com/support/pages/node/7268724 advisory
https://www.ibm.com/support/pages/node/7268604 advisory
https://www.ibm.com/support/pages/node/7268649 advisory
https://www.ibm.com/support/pages/node/7268725 advisory
https://advisory.splunk.com/advisories/SVD-2026-0512 advisory
https://advisory.splunk.com/advisories/SVD-2026-0513 advisory
https://advisory.splunk.com/advisories/SVD-2026-0509 advisory
https://advisory.splunk.com/advisories/SVD-2026-0510 advisory
https://advisory.splunk.com/advisories/SVD-2026-0505 advisory
https://advisory.splunk.com/advisories/SVD-2026-0515 advisory
https://advisory.splunk.com/advisories/SVD-2026-0507 advisory
https://advisory.splunk.com/advisories/SVD-2026-0506 advisory

…and 8 more

Open in Interactive Console →