A floating-point exception in the PSStack::roll function of Poppler before 25.04.0 can cause an application to crash when handling malformed inputs associated with INT_MIN.
CVSS Details
- CVSS 3.1 Base Score: 4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade poppler | Apr 29, 2025 | Apr 5, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 5, 2025 |
| Suse | — | Upgrade libpoppler-glib8-32bitUpgrade libpoppler-cpp2Upgrade libpoppler-qt4-develUpgrade libpoppler-develUpgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-qt5-1-32bitUpgrade libpoppler89Upgrade libpoppler-qt5-develUpgrade libpoppler135Upgrade libpoppler-qt6-3Upgrade libpoppler-glib8Upgrade libpoppler60Upgrade libpoppler-cpp0Upgrade libpoppler-glib-develUpgrade libpoppler135-32bitUpgrade libpoppler-qt6-develUpgrade libpoppler-qt4-4Upgrade poppler-toolsUpgrade libpoppler148Upgrade libpoppler-qt5-1Upgrade libpoppler-cpp0-32bit | Dec 5, 2025 | May 30, 2025 |
| Ubuntu | — | Upgrade libpoppler58 (Ubuntu Pro)Upgrade libpoppler97Upgrade poppler-utils (Ubuntu Pro)Upgrade libpoppler118Upgrade libpoppler73 (Ubuntu Pro)Upgrade libpoppler140Upgrade libpoppler134Upgrade poppler-utils | Apr 9, 2025 | Apr 5, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub