Critical Vulnerabilities in pdfminer Allow Code Execution on Ubuntu Systems

• •Two critical vulnerabilities in pdfminer allow arbitrary code execution.
• •Affected Ubuntu versions include 16.04 to 24.04 LTS.
• •Users should update their systems promptly to mitigate risks.

Two vulnerabilities (CVE-2025-64512 and CVE-2025-70559) in pdfminer, a PDF parser used in Ubuntu systems, could allow attackers to execute arbitrary code by opening specially crafted PDF files. The vulnerabilities were discovered in the parsing process of pdfminer, which failed to handle maliciously crafted files safely. Affected systems include Ubuntu 24.04 LTS, 22.04 LTS, 20.04 LTS, 18.04 LTS, and 16.04 LTS. Users are advised to update their systems to the latest package versions to mitigate the risk. The vulnerabilities were publicly disclosed, with CVE-2025-64512 published on November 10, 2025, and CVE-2025-70559 published on February 3, 2026. A standard system update is recommended to apply the necessary patches. The urgency of the situation is heightened by the potential for exploitation. CISA has confirmed the existence of these vulnerabilities, emphasizing the need for immediate action.