[GHSA] GHSA-fwg2-594c-jp42 (medium) — pypdf: Possible long runtimes/large memory usage for large CID font width ranges

GHSA-fwg2-594c-jp42 Severity: medium CVE: CVE-2026-71852

pypdf: Possible long runtimes/large memory usage for large CID font width ranges

### Impact

An attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consumption. This requires parsing the font width entries of a font with unusually large values, for example during text extraction.

### Patches