Official write-up, from the challenge author - Evan Sultanik: https://blog.trailofbits.com/2021/02/02/pdf-is-broken-a-justctf-challenge/

Original writeup (https://blog.trailofbits.com/2021/02/02/pdf-is-broken-a-justctf-challenge/).