Resource Allocation Flaw in pdfmake Affects Multiple Versions
CVE-2025-11362

8.7HIGH

Key Information:

Vendor

WordPress

Status
Vendor
CVE Published:
7 October 2025

What is CVE-2025-11362?

The vulnerability in pdfmake allows attackers to exploit a resource allocation flaw through manipulated URLs in file embedding. This issue can lead to crashes or unresponsiveness within the application, as it fails to properly manage system resources when subjected to crafted inputs. It’s critical for users of affected versions to update to mitigate this exploit.

Affected Version(s)

pdfmake 0 < 0.3.0-beta.17

References

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Ryusei Ishikawa
.
CVE-2025-11362 : Resource Allocation Flaw in pdfmake Affects Multiple Versions