The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Poppler 24.06.1 through 25.x before 25.04.0 allows stack consumption and a SIGSEGV via deeply nested structures within the metadata (such as GTS_PDFEVersion) of a PDF document, e.g., a regular expression for a long pdfsubver string. This occurs in Dict::lookup, Catalog::getMetadata, and associated functions in PDFDoc, with deep recursion in the regex executor (std::__detail::_Executor).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade poppler | Jun 16, 2026 | Jun 16, 2026 |
| Suse | — | Upgrade libpoppler-cpp0-32bitUpgrade libpoppler-glib8Upgrade libpoppler-qt5-develUpgrade libpoppler126Upgrade libpoppler89Upgrade libpoppler135Upgrade libpoppler-qt6-3Upgrade libpoppler-qt5-1-32bitUpgrade libpoppler-glib8-32bitUpgrade libpoppler-develUpgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-glib-develUpgrade libpoppler135-32bitUpgrade libpoppler-cpp0Upgrade libpoppler-qt6-develUpgrade poppler-toolsUpgrade libpoppler-qt5-1 | Dec 5, 2025 | Oct 24, 2025 |
| Ubuntu | — | Upgrade poppler-utilsUpgrade libpoppler118Upgrade libpoppler147Upgrade libpoppler134 | Oct 7, 2025 | Oct 2, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub