Insecure Deserialization (pickle) in pdfminer.six CMap Loader — Local Privesc

🗓️ 07 Jul 2026 16:03:10Reported by Python Packaging AdvisoryType

pypa🔗 github.com👁 49 Views

Insecure pickle deserialization in pdfminer.six CMap loader allows local privilege escalation.

Reporter	Title	Published	Views	Family All 209
GithubExploit	Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six	22 Jul 202618:17	–	githubexploit
GithubExploit	Exploit for CVE-2025-70559	15 Aug 202606:44	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six	21 Jul 202623:46	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six	15 Sep 202605:39	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six	15 Aug 202616:57	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six	12 Aug 202606:32	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six	21 Jul 202609:56	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six	19 Jul 202610:49	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six	27 Jul 202619:30	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six	27 Jul 202619:30	–	githubexploit

Vulners

Node

pypi pdfminer-sixRange0–20251230

Source	Link
github	www.github.com/pdfminer/pdfminer.six/security/advisories/GHSA-f83h-ghpp-7wcc
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-70559
github	www.github.com/pdfminer/pdfminer.six/commit/b808ee05dd7f0c8ea8ec34bdf394d40e63501086
github	www.github.com/pdfminer/pdfminer.six
pypi	www.pypi.org/project/pdfminer-six
github	www.github.com/advisories/GHSA-f83h-ghpp-7wcc

07 Jul 2026 17:25Current

7.6High risk

Vulners AI Score7.6

CVSS 3.17.8 - 8.6

EPSS0.00334

SSVC