PatchTheCVEfpdf vulnerabilities and fixes
Recent CVEs affecting fpdf, with upgrade or downgrade steps. 1 tracked.
fpdf has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2026-02-03. Highest priority: CVE-2025-65875 (score 41/100).
- CVE-2025-65875 HIGH 8.8 DOWNGRADE An arbitrary file upload vulnerability in the AddFont() function of FPDF v1.86 and earlier allows attackers to
FAQ
How do I fix fpdf vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is fpdf being exploited right now?
None of the tracked fpdf CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which fpdf CVE should I patch first?
CVE-2025-65875 currently ranks highest (41/100): An arbitrary file upload vulnerability in the AddFont() function of FPDF v1.86 and earlier allows attackers to.