TGViewer
PPHM HACKER NEWS PPHM HACKER NEWS @pphm_hackernews · 10.7K subscribers
Post #3447 172
🔴 CVE-2026-102995

pypdf is a free and open-source pure-python PDF library. Prior to 6.18.1, a crafted PDF can place unusually large source-code or destination-string tokens in a font /ToUnicode mapping, causing pypdf/_cmap.py parse_bfchar to decode and retain oversized values during operations such as text extraction and consume excessive memory. This is a second follow-up to earlier /ToUnicode resource-consumption fixes and is limited to the remaining token-length path. This issue is fixed in version 6.18.1.
Open in Telegram All posts from @pphm_hackernews
More from @pphm_hackernews
  1. Oct 12, 2026Malicious Uploads Enable Server Takeovers Through Popular Page Builder Extension Security…
  2. Oct 12, 2026🔴 iRhythm Data Breach Impacts at Least 360,000 People Medical equipment provider iRhythm…
  3. Oct 12, 2026🔴 Hackers remotely heat supermarket refrigerators to 50°C, destroying food and causing fi…
  4. Oct 12, 2026AnyPwn Exploit Exposes Critical Linux Remote Desktop Security Risk Security researchers ha…
  5. Oct 12, 2026🔴 Phishing emails are baiting your AI assistant You ignored the suspicious email. You did…
  6. Oct 12, 2026🔴 Ransomware devastates Japanese cloud! 495 organizations risk losing everything. A large…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →