CVE Intelligence

Fpdf vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Fpdf products: 1 record(s), with severity, exploitation and fixes.

Fpdf 1

Exploited only (KEV) →

CVE-2025-65875 Critical · 9.8 CWE-434 Feb 3, 2026
FPDF AddFont() Arbitrary File Upload Leading to Code Execution
An arbitrary file upload vulnerability in the AddFont() function of FPDF v1.86 and earlier allows attackers to execute arbitrary code via uploading a crafted PHP file.