A PDF file can potentially contain any nasty char, including quotes etc., so it's not a good idea to interpolate that binary data into the SQL query... (I'm assuming your $pdf_file[0] is holding the file's contents, not the filename).

Have you tried using placeholders instead? I.e. put pdf = ? in the query, and then pass the data using $sth->execute($pdf_data)