A floating-point exception in the PSStack::roll function of Poppler before 25.04.0 can cause an application to crash when handling malformed inputs associated with INT_MIN.
CVSS Details
- CVSS 3.1 Base Score: 4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade poppler | Apr 29, 2025 | Apr 5, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 5, 2025 |
| Suse | — | Upgrade libpoppler-glib8-32bitUpgrade libpoppler-develUpgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-cpp2Upgrade libpoppler89Upgrade libpoppler-qt5-1-32bitUpgrade libpoppler-qt6-3Upgrade libpoppler135Upgrade libpoppler-qt5-develUpgrade libpoppler-qt4-develUpgrade libpoppler-qt6-develUpgrade libpoppler-glib8Upgrade libpoppler-glib-develUpgrade libpoppler-cpp0-32bitUpgrade libpoppler148Upgrade libpoppler-qt4-4Upgrade libpoppler135-32bitUpgrade libpoppler-cpp0Upgrade libpoppler60Upgrade poppler-toolsUpgrade libpoppler-qt5-1 | Dec 5, 2025 | May 30, 2025 |
| Ubuntu | — | Upgrade poppler-utilsUpgrade libpoppler134Upgrade libpoppler73 (Ubuntu Pro)Upgrade libpoppler140Upgrade libpoppler58 (Ubuntu Pro)Upgrade libpoppler97Upgrade poppler-utils (Ubuntu Pro)Upgrade libpoppler118 | Apr 9, 2025 | Apr 5, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub