CVE-2025-70559

The pdfminer.six library (versions before 20251230 ) contains an insecure deserialization vulnerability in the CMap loading mechanism located in pdfminer/cmapdb.py. The library uses Python's pickle module to deserialize .pickle.gz cache files without proper validation. An attacker who can write t...