Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six

🗓️ 15 Aug 2026 16:57:44Reported by oguzylmzxType

pdfminer.six before 20250506 uses pickle.loads on attacker-controlled CMap files, enabling arbitrary code execution.

Reporter	Title	Published	Views	Family All 67
GithubExploit	Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six	22 Jul 202618:17	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six	21 Jul 202623:46	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six	12 Aug 202606:32	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six	21 Jul 202609:56	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six	19 Jul 202610:49	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six	27 Jul 202619:30	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six	27 Jul 202619:30	–	githubexploit
IBM Security Bulletins	Security Bulletin: The IBM Maximo Application Suite AI-Service component uses multiple third-party dependencies that contain vulnerabilities associated with multiple CVEs.	2 Feb 202604:22	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate Developer Edition	2 Feb 202613:08	–	ibm
ATTACKERKB	CVE-2025-70559	3 Feb 202600:00	–	attackerkb

15 Aug 2026 16:58Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.17.8 - 8.6

EPSS0.00309

SSVC