{"metadata": {"vulnerability": "CVE-2026-71870", "count": 42, "kinds": {"milestone": 17, "sighting": 1, "kev": 0, "other": 24}}, "data": [{"timestamp": "2026-08-07T18:26:53.524Z", "date_only": false, "value": "2026-08-07T18:26:53.524Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-71870", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-08-07T19:28:26.178Z", "date_only": false, "value": "2026-08-07T19:28:26.178Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-71870", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-08-07T19:28:26.178Z", "date_only": false, "value": "2026-08-07T19:28:26.178Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-71870", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-07T19:29:09Z", "date_only": false, "value": "2026-08-07T19:29:09Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-FP3F-MC75-235C", "record": "GHSA-FP3F-MC75-235C", "field": "published"}, {"timestamp": "2026-08-07T19:29:09Z", "date_only": false, "value": "2026-08-07T19:29:09Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-FP3F-MC75-235C", "record": "GHSA-FP3F-MC75-235C", "field": "modified"}, {"timestamp": "2026-08-07T20:16:00Z", "date_only": false, "value": "2026-08-07T20:16:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-71870", "record": "UBUNTU-CVE-2026-71870", "field": "published"}, {"timestamp": "2026-08-07T20:16:52.873Z", "date_only": false, "value": "2026-08-07T20:16:52.873", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-71870", "record": "FKIE_CVE-2026-71870", "field": "published"}, {"timestamp": "2026-08-07T20:34:02.124Z", "date_only": false, "value": "2026-08-07T20:34:02.124232Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/alon710/51a19d7e4b20307e86a86a2096f8e2e7", "record": "CVE-2026-71870", "field": "creation_timestamp", "uuid": "6c16d556-2a08-40e2-8bab-5f04cdac0dce", "content": "# CVE-2026-71870: CVE-2026-71870: Uncontrolled Resource Consumption (DoS) in pypdf ToUnicode CMap Parsing\n\n> **CVSS Score:** 4.8\n> **Published:** 2026-08-07\n> **Full Report:** https://cvereports.com/reports/CVE-2026-71870\n\n## Summary\nAn uncontrolled resource consumption vulnerability (CWE-400) exists in pypdf prior to version 6.15.0. When extracting text from a specially crafted PDF document, the parser fails to restrict token lengths within /ToUnicode CMap streams, causing unbounded memory allocation and process termination via Out-of-Memory (OOM) crashes.\n\n## TL;DR\nA vulnerability in pypdf allows attackers to trigger a Denial of Service (OOM crash) via crafted /ToUnicode CMap streams containing massive hex-encoded tokens.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-400\n- **Attack Vector**: Local (via crafted document parsing)\n- **CVSS Score**: 4.8\n- **Impact**: Denial of Service (OOM Process Crash)\n- **Exploit Status**: Proof-of-Concept only\n- **KEV Status**: Not listed\n\n## Affected Systems\n\n- pypdf library deployments processing untrusted PDF documents\n- **pypdf**: < 6.15.0 (Fixed in: `6.15.0`)\n\n## Mitigation\n\n- Upgrade the pypdf dependency to version 6.15.0 or later to ensure validation of CMap token sizes\n- Isolate PDF processing workers in containerized environments with strict memory limits using cgroups\n- Validate incoming file sizes and strip excessive stream data prior to extraction processing\n\n**Remediation Steps:**\n1. Identify all deployment environments running the pypdf library\n2. Run 'pip install --upgrade pypdf>=6.15.0' or update the project requirements.txt/poetry.lock file\n3. Verify text extraction processes handle 'LimitReachedError' exceptions gracefully to prevent unhandled service crashes\n4. Configure container resources with memory limits to prevent host-level OOM events\n\n## References\n\n- [GHSA Security Advisory](https://github.com/py-pdf/pypdf/security/advisories/GHSA-fp3f-mc75-235c)\n- [Pull Request #3944](https://github.com/py-pdf/pypdf/pull/3944)\n- [Fix Commit](https://github.com/py-pdf/pypdf/commit/afba8080e19d29a3c256a742b340995e695b35aa)\n- [Release Information](https://github.com/py-pdf/pypdf/releases/tag/6.15.0)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-71870) - Automated Vulnerability Intelligence*", "url": "https://gist.github.com/alon710/51a19d7e4b20307e86a86a2096f8e2e7"}, {"timestamp": "2026-08-10T10:43:51.717Z", "date_only": false, "value": "2026-08-10T10:43:51.717413Z", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2026-3655", "record": "PYSEC-2026-3655", "field": "published"}, {"timestamp": "2026-08-10T11:02:01.102Z", "date_only": false, "value": "2026-08-10T11:02:01.102993Z", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2026-3655", "record": "PYSEC-2026-3655", "field": "modified"}, {"timestamp": "2026-08-10T12:04:06.963Z", "date_only": false, "value": "2026-08-10T12:04:06.963067Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-71870", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-08-10T12:04:06.963Z", "date_only": false, "value": "2026-08-10T12:04:06.963067Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-71870", "record": "FKIE_CVE-2026-71870", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-08-10T12:24:22.451Z", "date_only": false, "value": "2026-08-10T12:24:22.451Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-71870", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-10T12:24:22.451Z", "date_only": false, "value": "2026-08-10T12:24:22.451Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-71870", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-13T16:54:46Z", "date_only": false, "value": "2026-08-13T16:54:46Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-GPTME-CVE-2026-71870", "record": "BREW-GPTME-CVE-2026-71870", "field": "published"}, {"timestamp": "2026-08-13T17:25:44Z", "date_only": false, "value": "2026-08-13T17:25:44Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-PDFALYZER-CVE-2026-71870", "record": "BREW-PDFALYZER-CVE-2026-71870", "field": "published"}, {"timestamp": "2026-08-13T17:25:44Z", "date_only": false, "value": "2026-08-13T17:25:44Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-PDFLY-CVE-2026-71870", "record": "BREW-PDFLY-CVE-2026-71870", "field": "published"}, {"timestamp": "2026-08-13T17:29:24Z", "date_only": false, "value": "2026-08-13T17:29:24Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-PSUTILS-CVE-2026-71870", "record": "BREW-PSUTILS-CVE-2026-71870", "field": "published"}, {"timestamp": "2026-08-24T00:00:00Z", "date_only": false, "value": "2026-08-24T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11588-1", "record": "OPENSUSE-SU-2026:11588-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-08-24T00:00:00Z", "date_only": false, "value": "2026-08-24T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11588-1", "record": "OPENSUSE-SU-2026:11588-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-08-24T00:00:00Z", "date_only": false, "value": "2026-08-24T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11588-1", "record": "OPENSUSE-SU-2026:11588-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-08-24T00:00:00Z", "date_only": false, "value": "2026-08-24T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11588-1", "record": "OPENSUSE-SU-2026:11588-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-09-16T20:25:17Z", "date_only": false, "value": "2026-09-16T20:25:17Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11588-1", "record": "OPENSUSE-SU-2026:11588-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-16T21:27:20Z", "date_only": false, "value": "2026-09-16T21:27:20Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11588-1", "record": "OPENSUSE-SU-2026:11588-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-17T17:21:00Z", "date_only": false, "value": "2026-09-17T17:21:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11588-1", "record": "OPENSUSE-SU-2026:11588-1", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-09-18T09:30:28.265Z", "date_only": false, "value": "2026-09-18T09:30:28.265308Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-YN75151", "record": "CLEANSTART-2026-YN75151", "field": "published"}, {"timestamp": "2026-09-21T00:00:00Z", "date_only": true, "value": "2026-09-21", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1233", "record": "CERTFR-2026-AVI-1233", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2026-09-21T20:58:20Z", "date_only": false, "value": "2026-09-21T20:58:20Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-GPTME-CVE-2026-71870", "record": "BREW-GPTME-CVE-2026-71870", "field": "modified"}, {"timestamp": "2026-09-22T00:00:00Z", "date_only": true, "value": "2026-09-22", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1233", "record": "CERTFR-2026-AVI-1233", "field": "vendor_advisories.2.published_at"}, {"timestamp": "2026-09-23T00:00:00Z", "date_only": true, "value": "2026-09-23", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1233", "record": "CERTFR-2026-AVI-1233", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-09-24T00:00:00Z", "date_only": true, "value": "2026-09-24", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1233", "record": "CERTFR-2026-AVI-1233", "field": "vendor_advisories.8.published_at"}, {"timestamp": "2026-09-25T00:00:00Z", "date_only": false, "value": "2026-09-25T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1233", "record": "CERTFR-2026-AVI-1233", "field": "last_revision_date"}, {"timestamp": "2026-09-25T00:00:00Z", "date_only": false, "value": "2026-09-25T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1233", "record": "CERTFR-2026-AVI-1233", "field": "initial_release_date"}, {"timestamp": "2026-09-25T00:00:00Z", "date_only": false, "value": "2026-09-25T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1233", "record": "CERTFR-2026-AVI-1233", "field": "revisions.0.revision_date"}, {"timestamp": "2026-10-06T10:26:38Z", "date_only": false, "value": "2026-10-06T10:26:38Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11588-1", "record": "OPENSUSE-SU-2026:11588-1", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2026-10-06T10:26:38Z", "date_only": false, "value": "2026-10-06T10:26:38Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11588-1", "record": "OPENSUSE-SU-2026:11588-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-08T01:09:27Z", "date_only": false, "value": "2026-10-08T01:09:27Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-PDFALYZER-CVE-2026-71870", "record": "BREW-PDFALYZER-CVE-2026-71870", "field": "modified"}, {"timestamp": "2026-10-09T07:01:14Z", "date_only": false, "value": "2026-10-09T07:01:14Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-YN75151", "record": "CLEANSTART-2026-YN75151", "field": "modified"}, {"timestamp": "2026-10-17T09:49:44Z", "date_only": false, "value": "2026-10-17T09:49:44Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-71870", "record": "UBUNTU-CVE-2026-71870", "field": "modified"}, {"timestamp": "2026-10-23T09:43:27Z", "date_only": false, "value": "2026-10-23T09:43:27Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-PDFLY-CVE-2026-71870", "record": "BREW-PDFLY-CVE-2026-71870", "field": "modified"}, {"timestamp": "2026-10-23T09:43:59Z", "date_only": false, "value": "2026-10-23T09:43:59Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-PSUTILS-CVE-2026-71870", "record": "BREW-PSUTILS-CVE-2026-71870", "field": "modified"}, {"timestamp": "2026-10-24T15:10:00.190Z", "date_only": false, "value": "2026-10-24T15:10:00.190", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-71870", "record": "FKIE_CVE-2026-71870", "field": "lastModified"}]}