Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six

CVE-2025-64512 - pdfminer.six Remote Code Execution RCE !...

Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six

No d...

Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six

CVE-2025-64...

Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six

CVE-2025-64512 - pdfminer.six Remote Code Execution RCE !...

Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six

CVE-2025-64512 — pdfminer.six Insecure Deserialization Pickle...

Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six

No d...

ocrmypdf (>=9.6.0, <=9.7.1), screenplay-pdf-to-json (>=0.1.0, <=0.3.4) +2 more potentially affected by CVE-2025-64512 via pdfminer-six (20200124.0.0)

pdfminer-six PYPI version 20200124.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - ocrmypdf =9.6.0, =0.1.0, =1.34.27, =1.36.9 Source cves: CVE-2025-64512 Source advisory: OSV:PYSEC-2026-1762...

seleniumbase (1.34.26) potentially affected by CVE-2025-64512 via pdfminer-six (20200121.0.0)

pdfminer-six PYPI version 20200121.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - seleniumbase 1.34.26 Source cves: CVE-2025-64512 Source advisory: OSV:PYSEC-2026-1762...

ocrmypdf (>=9.4.0, <=9.5.0), seleniumbase (>=1.34.12, <=1.34.25) potentially affected by CVE-2025-64512 via pdfminer-six (20200104.0.0)

pdfminer-six PYPI version 20200104.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - ocrmypdf =9.4.0, =1.34.12, =1.34.25 Source cves: CVE-2025-64512 Source advisory: OSV:PYSEC-2026-1762...

bankruptcy (>=0.0.2, <=0.0.5), copy-spotter (>=0.1.12, <=0.1.16) +7 more potentially affected by CVE-2025-64512 via pdfminer-six (20200517.0.0)

pdfminer-six PYPI version 20200517.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - bankruptcy =0.0.2, =0.1.12, =1.1.1, =0.1.0a1, =9.8.1, =0.4.0, =1.38.2, =1.42.15 Source cves: CVE-2025-64512 Source advisory:...

amms-planop2xls (0.7.3), drunken-child-in-the-fog (>=0.1.0, <=0.3.1) +1 more potentially affected by CVE-2025-64512 via pdfminer-six (20170419.0.0)

pdfminer-six PYPI version 20170419.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - amms-planop2xls 0.7.3 - drunken-child-in-the-fog =0.1.0, =0.1.0, =0.1.2 Source cves: CVE-2025-64512 Source advisory:...

magic-pdf (1.3.10) potentially affected by CVE-2025-64512 via pdfminer-six (20250324.0.0)

pdfminer-six PYPI version 20250324.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - magic-pdf 1.3.10 Source cves: CVE-2025-64512 Source advisory: OSV:PYSEC-2026-1762...

PYSEC-2026-1761 Insecure Deserialization (pickle) in pdfminer.six CMap Loader — Local Privesc

🚀 Overview This report demonstrates a real-world privilege escalation vulnerability in pdfminer.six due to unsafe usage of Python's pickle module for CMap file loading. It shows how a low-privileged user can gain root access or escalate to any service account by exploiting insecure deserializatio...

agentix-agent-sdk (0.1.0), agixt (>=1.7.0, <=1.7.11) +60 more potentially affected by CVE-2025-64512 via pdfminer-six (20231228.0.0)

pdfminer-six PYPI version 20231228.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - agentix-agent-sdk 0.1.0 - agixt =1.7.0, =1.0.0, =0.1.1, =5.2.161, =1.0.0, =0.1.0, =2.2.5rc1, =1.1.6, =0.1.0, =0.1.0, =2024.5.10,...

aclpubcheck (>=0.1.0, <=0.2.0), agixt (>=1.1.74b0, <=1.3.155) +116 more potentially affected by CVE-2025-64512 via pdfminer-six (20221105.0.0)

pdfminer-six PYPI version 20221105.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - aclpubcheck =0.1.0, =1.1.74b0, =0.1.11, =0.1.0, =0.3.3, =0.3.6, =0.0.8, =0.1.5, =0.2.0, =4.5.1, =1.0.0, =0.1.0, =0.1.0, =0.1.0,...

bormeparser (>=0.1.1, <=0.1.3) potentially affected by CVE-2025-64512 via pdfminer-six (20140915.0.0)

pdfminer-six PYPI version 20140915.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - bormeparser =0.1.1, =0.1.3 Source cves: CVE-2025-64512 Source advisory: OSV:PYSEC-2026-1762...

achoz (>=0.3.0, <=0.3.42), agentic-framework (>=0.3.0, <=0.3.11) +21 more potentially affected by CVE-2025-64512 via pdfminer-six (20191110.0.0)

pdfminer-six PYPI version 20191110.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - achoz =0.3.0, =0.3.0, =0.2.0, =0.0.1, =0.0.2, =0.4.0, =1.0.0, =0.1.0, =9.1.1, =6.0.0, =1.8.0, =0.1.0, =0.1.6 and more Source cves...

babeldoc (>=0.3.38, <=0.3.60), iflow-mcp-pdfmathtranslate-pdf2zh (1.9.11) +3 more potentially affected by CVE-2025-64512 via pdfminer-six (20250416.0.0)

pdfminer-six PYPI version 20250416.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - babeldoc =0.3.38, =1.9.8, =1.9.11 Source cves: CVE-2025-64512 Source advisory: OSV:PYSEC-2026-1762...

PYSEC-2026-1762 Arbitrary Code Execution in pdfminer.six via Crafted PDF Input

Summary pdfminer.six will execute arbitrary code from a malicious pickle file if provided with a malicious PDF file. The CMapDB.loaddata function in pdfminer.six uses pickle.loads to deserialize pickle files. These pickle files are supposed to be part of the pdfminer.six distribution stored in th...

bormeparser (>=0.3.0, <=0.3.5), pdfplumber-i (>=0.5.10, <=0.5.14) +4 more potentially affected by CVE-2025-64512 via pdfminer-six (20170720.0.0)

pdfminer-six PYPI version 20170720.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdfminer-six and may be impacted: - bormeparser =0.3.0, =0.5.10, =11.0.0, =1.0.0.0b197.dev50, =1.0.0b233 - tzager 0.0.3.3.6 - vigimeteo-cli 0.5.0 Source cves:...