pypdf is a free and open-source pure-python PDF library. Prior to 6.18.1, a crafted PDF can provide a TrueType or Type1 simple font with an unusually large /Widths array, causing pypdf/_font.py Font._collect_tt_t1_character_widths to process entries beyond the 256 character codes meaningful for a simple font and consume excessive memory during operations such as text extraction. This issue is fixed in version 6.18.1.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - pypdf is a free and open-source pure-python PDF library. Prior to 6.18.1, a crafted PDF can provide a
    TrueType or Type1 simple font with an unusually large /Widths array, causing pypdf/_font.py
    Font._collect_tt_t1_character_widths to process entries beyond the 256 character codes meaningful for a
    simple font and consume excessive memory during operations such as text extraction. This issue is fixed in
    version 6.18.1. (CVE-2026-102996)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - pypdf is a free and open-source pure-python PDF library. Prior to 6.18.1, a crafted PDF can provide a     TrueType or Type1 simple font with an unusually large /Widths array, causing pypdf/_font.py     Font._collect_tt_t1_character_widths to process entries beyond the 256 character codes meaningful for a     simple font and consume excessive memory during operations such as text extraction. This issue is fixed in     version 6.18.1. (CVE-2026-102996)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
471229	Chainguard: multiple open-webui packages: security update to 0.11.4-r3	Tenable Cloud Security	Chainguard Local Security Checks	Local	high
471229	Chainguard: multiple open-webui packages: security update to 0.11.4-r3	Tenable Self-Hosted Container Security	Chainguard Local Security Checks	Local	high
471109	Echo: pypdf: security update to 6.18.1	Tenable Cloud Security	Echo Local Security Checks	Local	high
471109	Echo: pypdf: security update to 6.18.1	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	high
359499	Linux Distros Unpatched Vulnerability : CVE-2026-102996	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2026-102996

high

Tenable Plugins

high

high

high

high

high