Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six CVE-2025-64512

## https://sploitus.com/exploit?id=11AD219D-F4A5-5008-908F-FEF87CC3F5A8
# CVE-2025-64512 - pdfminer.six Remote Code Execution (RCE)

[![Python](https://img.shields.io/badge/Python-3.6%2B-blue)](https://www.python.org/)
[![License](https://img.shields.io/badge/License-MIT-green)](LICENSE)

## 📋 Description

This repository contains a proof-of-concept exploit for **CVE-2025-64512**, a critical vulnerability in `pdfminer.six` versions prior to **20251107**.

The vulnerability allows an attacker to achieve **Remote Code Execution (RCE)** by uploading a malicious PDF that triggers insecure deserialization via Python's `pickle.load()`.

## ⚠️ Disclaimer

> **This exploit is for educational and authorized testing purposes only.**  
> Use only on systems you own or have explicit permission to test.  
> The author is not responsible for any misuse.

## 🔍 Vulnerability Details

| **CVE ID**          | CVE-2025-64512 |
|---------------------|----------------|
| **Affected Library** | pdfminer.six   |
| **Versions**         | < 20251107     |
| **Type**             | Remote Code Execution (RCE) |
| **Vector**           | Insecure deserialization via `pickle.load()` |

### Technical Overview

The `CMapDB._load_data()` function in `pdfminer.six` loads CMap resources using `pickle.loads()`. A malicious PDF can specify an arbitrary path to a `.pickle.gz` file, which gets deserialized and executes arbitrary code.

## 🚀 Installation

```bash
git clone https://github.com/MehdiChyhab/CVE-2025-64512-exploit.git
cd CVE-2025-64512-exploit
pip install -r requirements.txt