Poppler 24.06.1 through 25.x before 25.04.0 allows stack consumption and a SIGSEGV via deeply nested structures within the metadata (such as GTS_PDFEVersion) of a PDF document, e.g., a regular expression for a long pdfsubver string. This occurs in Dict::lookup, Catalog::getMetadata, and associated functions in PDFDoc, with deep recursion in the regex executor (std::__detail::_Executor).
CVSS Details
- CVSS 3.1 Base Score: 2.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade poppler | Jun 16, 2026 | Jun 16, 2026 |
| Suse | — | Upgrade libpoppler-cpp0Upgrade libpoppler-cpp0-32bitUpgrade libpoppler-qt6-develUpgrade poppler-toolsUpgrade libpoppler-qt5-1Upgrade libpoppler135-32bitUpgrade libpoppler-glib-develUpgrade libpoppler-qt5-develUpgrade libpoppler-glib8-32bitUpgrade libpoppler135Upgrade libpoppler-qt6-3Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler89Upgrade libpoppler-develUpgrade libpoppler-glib8Upgrade libpoppler-qt5-1-32bitUpgrade libpoppler126 | Dec 5, 2025 | Oct 24, 2025 |
| Ubuntu | — | Upgrade libpoppler134Upgrade libpoppler147Upgrade libpoppler118Upgrade poppler-utils | Oct 7, 2025 | Oct 2, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub