Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six

CVE-2025-64512

githubexploit · 2026-08-12

Description

Deserialization of untrusted data vulnerability in Pdfminer.Six allows arbitrary code execution via crafted PDF files.

Affected Pdfminer Pdfminer.six versions

Pdfminer Pdfminer.six< 2025-11-07

All known vulnerabilities by product

Debian Pdfminer.Six

CVSS 8.6 for CVE-2025-64512

8.6

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Attack Vector:LOCAL

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:REQUIRED

Scope:CHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

36%confidence this exploit runs

Based on 2 file(s) in the source

EPSS Score

0.3%higher than 23.6% of all CVEs

Updated 2026-08-17

Exploit Details

Modified:2026-08-12 06:33

Last Seen:2026-08-12 06:35

Reporter:DodgeNefoli

Written in:Python

Last commit:2026-08-12

Other exploits for CVE-2025-64512

Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six

2026-08-15 oguzylmzxGITHUB

Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six

2026-07-27 saadhassan77GITHUB

Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six

2026-07-27 saadhassan77GITHUB

Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six

2026-07-22 stoic-crawlerGITHUB

Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six

2026-07-21 BardLaudianGITHUB

Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six

2026-07-21 MehdiChyhabGITHUB

Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six

2026-07-19 matesz44GITHUB

Exploit Code

README2 lines

## https://sploitus.com/exploit?id=639B2CE0-0892-544E-A4F5-BAF528B9E857
Make sure to fill the parameter i.e Target and Upload_dir.

Exploit Code

Share

Share on social media: