Unrated severityOSV Advisory· Published Feb 3, 2026· Updated Feb 4, 2026

CVE-2025-65875

Description

An arbitrary file upload vulnerability in the AddFont() function of FPDF v1.86 and earlier allows attackers to execute arbitrary code via uploading a crafted PHP file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Setasign/FpdfOSV
Range: 1.7, 1.8, 1.8.1, …
FPDF/FPDFllm-create
Range: <=1.86

Patches

Vulnerability mechanics

References

www.fpdf.orgmitre
advisories.gitlab.com/pkg/composer/tecnickcom/tc-lib-pdf-font/CVE-2024-56520/mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000