CVE-2025-24671

Summary

CVE-2025-24671 is a Deserialization of Untrusted Data vulnerability affecting the Save as PDF plugin by Pdfcrowd, from version n/a to 4.4.0. Attackers can exploit this Object Injection flaw to execute arbitrary code and potentially gain unauthorized access to systems. The vulnerability arises due to the plugin's failure to validate and sanitize user input during the data deserialization process. This poses a significant risk to organizations and individuals utilizing the susceptible plugin version. It is recommended that users update to the latest, secure version of the plugin to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.