Buffer Overflow Vulnerability in PDF Shaper from PDF Shaper
CVE-2025-34106

8.4HIGH

Key Information:

Vendor

Burnaware

Status
PDF Shaper
Vendor
CVE Published:
15 July 2025

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2025-34106?

A buffer overflow vulnerability has been identified in PDF Shaper versions 3.5 and 3.6. This flaw occurs when users utilize the 'Convert PDF to Image' feature with specially crafted PDF files. Through social engineering tactics, an attacker can trick users into opening such files, potentially allowing arbitrary code execution with the user’s privileges. This vulnerability has been confirmed on Windows XP, 7, 8, and 10, specifically affecting the PDFTools.exe component, thus posing a significant threat to user systems and data integrity.

Affected Version(s)

PDF Shaper Windows 3.5 <= 3.6

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2025-34106 - Proof of Concept

CVE-2025-34106 - Proof of Concept

References

https://raw.githubusercontent.com/rapid7/metasploit-frame...
exploit
https://www.exploit-db.com/exploits/37760
exploit
https://www.pdfshaper.com/
product

CVSS V4

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

metacom
.
CVE-2025-34106 : Buffer Overflow Vulnerability in PDF Shaper from PDF Shaper