Pdfminer Pdfminer.Six vulnerabilities

1 known vulnerability affecting pdfminer/pdfminer.six.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2025-64512HIGHCVSS 7.8fixed in 2025-11-072025-11-10

CVE-2025-64512 [HIGH] CWE-502 CVE-2025-64512: Pdfminer.six is a community maintained fork of the original PDFMiner, a tool for extracting informat Pdfminer.six is a community maintained fork of the original PDFMiner, a tool for extracting information from PDF documents. Prior to version 20251107, pdfminer.six will execute arbitrary code from a malicious pickle file if provided with a malicious PDF file. The `CMapDB._load_data()` function in pdfminer.six uses `pickle.loads()` to deserialize pickl