CVE-2025-65875 is a high-severity arbitrary file upload vulnerability in the AddFont() function of FPDF version 1.86 and earlier. It allows attackers with low privileges to upload crafted PHP files without user interaction, leading to remote code execution. The vulnerability impacts confidentiality, integrity, and availability of affected systems and can be exploited remotely over the network. No known exploits are currently in the wild, and no patches have been published yet. European organizations using vulnerable FPDF versions in web applications are at risk, especially those in sectors relying heavily on PDF generation. Mitigation involves restricting file upload capabilities, implementing strict input validation, and monitoring for suspicious file uploads. Countries with significant software development and digital services sectors, such as Germany, France, and the UK, are more likely to be affected. Due to the high impact and ease of exploitation, this vulnerability demands urgent attention from defenders.
