Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six

CVE-2025-64512 - pdfminer.six Remote Code Execution RCE !...

Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six

No d...

Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six

CVE-2025-64...

Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six

CVE-2025-64512 - pdfminer.six Remote Code Execution RCE !...

Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six

CVE-2025-64512 — pdfminer.six Insecure Deserialization Pickle...

Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six

No d...

PYSEC-2026-1762 Arbitrary Code Execution in pdfminer.six via Crafted PDF Input

Summary pdfminer.six will execute arbitrary code from a malicious pickle file if provided with a malicious PDF file. The CMapDB.loaddata function in pdfminer.six uses pickle.loads to deserialize pickle files. These pickle files are supposed to be part of the pdfminer.six distribution stored in th...

babeldoc (>=0.3.38, <=0.3.60), iflow-mcp-pdfmathtranslate-pdf2zh (1.9.11) +3 more potentially affected by CVE-2025-70559 via pdfminer-six (20250416.0.0)

pdfminer-six PYPI version 20250416.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - babeldoc =0.3.38, =1.9.8, =1.9.11 Source cves: CVE-2025-70559 Source advisory: OSV:PYSEC-2026-1761...

bankruptcy (>=0.0.2, <=0.0.5), copy-spotter (>=0.1.12, <=0.1.16) +7 more potentially affected by CVE-2025-64512 via pdfminer-six (20200517.0.0)

pdfminer-six PYPI version 20200517.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - bankruptcy =0.0.2, =0.1.12, =1.1.1, =0.1.0a1, =9.8.1, =0.4.0, =1.38.2, =1.42.15 Source cves: CVE-2025-64512 Source advisory:...

bormeparser (>=0.1.1, <=0.1.3) potentially affected by CVE-2025-64512 via pdfminer-six (20140915.0.0)

pdfminer-six PYPI version 20140915.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - bormeparser =0.1.1, =0.1.3 Source cves: CVE-2025-64512 Source advisory: OSV:PYSEC-2026-1762...

bormeparser (>=0.3.0, <=0.3.5), pdfplumber-i (>=0.5.10, <=0.5.14) +4 more potentially affected by CVE-2025-64512 via pdfminer-six (20170720.0.0)

pdfminer-six PYPI version 20170720.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - bormeparser =0.3.0, =0.5.10, =11.0.0, =1.0.0.0b197.dev50, =1.0.0b233 - tzager 0.0.3.3.6 - vigimeteo-cli 0.5.0 Source cves:...

agentic-framework (>=0.2.0, <=0.2.5), bormeparser (>=0.4.0, <=0.4.1) +14 more potentially affected by CVE-2025-64512 via pdfminer-six (20181108.0.0)

pdfminer-six PYPI version 20181108.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - agentic-framework =0.2.0, =0.4.0, =0.0.1, =7.3.0, =0.2.0, =0.0.1, =1.0.0rc1, =0.3.0, =0.5.15, =0.2.0, =0.1.2, =1.0.0, =1.2.0 -...

ocrmypdf (>=9.0.5, <=9.1.0), reviewboardpowerpack (>=3.0.4, <=5.3.0) potentially affected by CVE-2025-64512 via pdfminer-six (20191020.0.0)

pdfminer-six PYPI version 20191020.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - ocrmypdf =9.0.5, =3.0.4, =5.3.0 Source cves: CVE-2025-64512 Source advisory: OSV:PYSEC-2026-1762...

ocrmypdf (>=9.4.0, <=9.5.0), seleniumbase (>=1.34.12, <=1.34.25) potentially affected by CVE-2025-64512 via pdfminer-six (20200104.0.0)

pdfminer-six PYPI version 20200104.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - ocrmypdf =9.4.0, =1.34.12, =1.34.25 Source cves: CVE-2025-64512 Source advisory: OSV:PYSEC-2026-1762...

seleniumbase (1.34.26) potentially affected by CVE-2025-64512 via pdfminer-six (20200121.0.0)

pdfminer-six PYPI version 20200121.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - seleniumbase 1.34.26 Source cves: CVE-2025-64512 Source advisory: OSV:PYSEC-2026-1762...

ocrmypdf (>=9.6.0, <=9.7.1), screenplay-pdf-to-json (>=0.1.0, <=0.3.4) +2 more potentially affected by CVE-2025-64512 via pdfminer-six (20200124.0.0)

pdfminer-six PYPI version 20200124.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - ocrmypdf =9.6.0, =0.1.0, =1.34.27, =1.36.9 Source cves: CVE-2025-64512 Source advisory: OSV:PYSEC-2026-1762...

deckz (2.6.0), ocrmypdf (>=9.7.2, <=9.8.0) +4 more potentially affected by CVE-2025-64512 via pdfminer-six (20200402.0.0)

pdfminer-six PYPI version 20200402.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - deckz 2.6.0 - ocrmypdf =9.7.2, =0.1.0, =1.0.0, =1.36.10, =1.38.1 Source cves: CVE-2025-64512 Source advisory: OSV:PYSEC-2026-1762...

ocrmypdf (10.3.1), seleniumbase (>=1.43.0, <=1.43.1) potentially affected by CVE-2025-64512 via pdfminer-six (20200720.0.0)

pdfminer-six PYPI version 20200720.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - ocrmypdf 10.3.1 - seleniumbase =1.43.0, =1.43.1 Source cves: CVE-2025-64512 Source advisory: OSV:PYSEC-2026-1762...

ardio (>=1.0.0, <=1.1.0), bormeparser (0.4.2) +21 more potentially affected by CVE-2025-64512 via pdfminer-six (20201018.0.0)

pdfminer-six PYPI version 20201018.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - ardio =1.0.0, =0.4.0, =0.1.1, =0.99.0, =1.0.0, =0.3.0, =11.3.1, =0.1.1, =0.6.0, =0.14.0, =1.0.0, =0.0.2b0, =0.0.3.post1 and more...

edspdf (>=0.5.0b0, <=0.5.3), ocrmypdf (>=13.4.2, <=13.4.3) +3 more potentially affected by CVE-2025-64512 via pdfminer-six (20220319.0.0)

pdfminer-six PYPI version 20220319.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - edspdf =0.5.0b0, =13.4.2, =0.6.1, =1.4.0, =2.4.24, =3.2.9 Source cves: CVE-2025-64512 Source advisory: OSV:PYSEC-2026-1762...