Back Linuxsecurity

Ubuntu 24.04 LTS pdfminer Important Code Execution Risk USN-8837

Linuxsecurity •LinuxSecurity Advisories • September 29, 2026

CISA confirms exploitation of a Linux firewall flaw. Check if your systems need the fix. ×

pdfminer could be made to run programs as your login if it opened a specially crafted file. Software Description: - pdfminer: PDF parser and analyser Details: It was discovered that pdfminer did not safely parse specially crafted PDF files. An attacker could possibly use these issues to execute arbitrary code. (CVE-2025-64512, CVE-2025-70559)

pdfminer could be made to run programs as your login if it opened a

specially crafted file.

Software Description:

- pdfminer: PDF parser and analyser

It was discovered that pdfminer did not safely parse specially crafted

PDF files. An attacker could possibly use these issues to execute

arbitrary code. (CVE-2025-64512, CVE-2025-70559)

The problem can be corrected by updating your system to the following package versions: Ubuntu 24.04 LTS python3-pdfminer 20221105+dfsg-1ubuntu0.1~esm1 Available with Ubuntu Pro Ubuntu 22.04 LTS python3-pdfminer 20220319+dfsg-1ubuntu0.1~esm1 Available with Ubuntu Pro Ubuntu 20.04 LTS python3-pdfminer 20191020+dfsg-2ubuntu0.1~esm1 Available with Ubuntu Pro Ubuntu 18.04 LTS python-pdfminer 20140328+dfsg-1ubuntu0.18.04.1~esm1 Available with Ubuntu Pro Ubuntu 16.04 LTS python-pdfminer 20140328+dfsg-1ubuntu0.16.04.1~esm1 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes.

CVE-2025-64512, CVE-2025-70559

Ubuntu Security Notice USN-8837-1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerabilities in pdfminer Allow Code Execution on Ubuntu Systems Two vulnerabilities (CVE-2025-64512 and CVE-2025-70559) in pdfminer, a PDF parser used in Ubuntu systems, could allow attackers to execute arbitrary code by opening specially crafted PDF files. The vulnerabilities were discovered in the parsing process of pdfminer, which failed to handle maliciously crafted files safely. Affected systems include Ubuntu 24.04 LTS, 22.04 LTS, 20.04 LTS, 18.04 LTS, and 16.04 LTS. Users are advised to update their systems to the latest package versions to mitigate the risk. The vulnerabilities were publicly disclosed, with CVE-2025-64512 published on November 10, 2025, and CVE-2025-70559 published on February 3, 2026. A standard system update is recommended to apply the necessary patches. The urgency of the situation is heightened by the potential for exploitation. CISA has confirmed the existence of these vulnerabilities, emphasizing the need for immediate action. 2 sources 72

Extracted Entities

Ubuntu 24.04 LTS pdfminer Important Code Execution Risk USN-8837

The full story

Extracted Entities

Attack Types (1)

CVEs (2)

Platforms (1)