Threats tagged 'brew-psutils-cve-2026-71852'

A vulnerability in pypdf prior to version 6.15.0 allows an attacker to craft a malicious PDF that causes long runtimes and excessive memory consumption during font width parsing. This issue occurs in the Font._collect_cid_character_widths function when processing fonts with unusually large width values. The vulnerability has a medium severity rating and does not impact confidentiality or integrity but affects availability. It has been fixed in pypdf version 6.15.0. Workarounds include applying the changes from a specific pull request if upgrading is not immediately possible.