Pdfminer.six is a community maintained fork of the original PDFMiner, a tool for extracting information from PDF documents. Prior to version 20251107, pdfminer.six will execute arbitrary code from a malicious pickle file if provided with a malicious PDF file. The `CMapDB._load_data()` function in pdfminer.six uses `pickle.loads()` to deserialize pickle files. These pickle files are supposed to be part of the pdfminer.six distribution stored in the `cmap/` directory, but a malicious PDF can specify an alternative directory and filename as long as the filename ends in `.pickle.gz`. A malicious, zipped pickle file can then contain code which will automatically execute when the PDF is processed. Version 20251107 fixes the issue.
[POC] GHSA-652q-gvq3-74qv — CVE-2025-64512
Exploit for CVE-2025-64512 to get a reverse shell.
PoC: CVE-2025-64512-pdfminer-PoC
PoC for CVE-2025-64512: pdfminer.six CMapDB pickle deserialization RCE via crafted PDF
PoC: Bedside.htb_solved
Writeup educativo de la máquina Bedside (Medium) de Hack The Box. Cubre: reconocimiento, explotación de deserialización insegura en pdfminer.six (CVE-2025-64512), path traversal en Vite dev server, y escalada de privilegios mediante abuso de torch.load()/pickle. Fines educativos únicamente.
PoC: CVE-2025-64512-exploit
CVE-2025-64512 - pdfminer.six Remote Code Execution Exploit
PoC: CVE-2025-64512
CLI wrapper around the official PoC for CVE-2025-64512 — pdfminer.six insecure pickle deserialization via crafted PDF (RCE)
PoC: PoC-for-CVE-2025-64512
PoC script for CVE-2025-64512
PoC: CVE-2025-64512
CVE-2025-64512: pdfminer.six pickle deserialization rce; pickle.gz + pdf generator w/ custom payloads
PoC: CVE-2025-64512-Polyglot-PoC
A Proof-of-Concept for CVE-2025-64512 using a polyglot file.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Get alerted for CVEs like this
Register your stack and get notified within minutes when a matching CVE drops.
Start monitoring free