CVE-2025-34106 HIGH

CVE-2025-34106: PDF Shaper v3.5/3.6 Buffer Overflow via Convert to Image Feature

Vendor Burnaware
Product PDF Shaper
Weakness CWE-119
Published July 15, 2025
Last update May 14, 2026
View on NVD All CVEs

CVSS base score

8.4/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction —
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

A buffer overflow vulnerability exists in PDF Shaper versions 3.5 and 3.6 when converting a crafted PDF file to an image using the 'Convert PDF to Image' functionality. An attacker can exploit this vulnerability by tricking a user into opening a maliciously crafted PDF file, leading to arbitrary code execution under the context of the user. This vulnerability has been verified on Windows XP, 7, 8, and 10 platforms using the PDFTools.exe component.

Key dates

02Disclosure timeline

July 15, 2025 CVE published
May 14, 2026 Record updated