CVE-2026-119207 is a high-severity vulnerability in pdfalyzer's pypdf component that allows an attacker to craft a malicious PDF causing large memory usage when an invalid dictionary is loaded in strict mode. This can lead to resource exhaustion. The issue has been fixed in pypdf version 6.21.3. If upgrading is not immediately possible, applying the changes from the referenced pull request #4265 is recommended as a workaround.