An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade poppler | Jul 23, 2026 | Jul 23, 2026 |
| Suse | — | Upgrade libpoppler135-32bitUpgrade libpoppler-cpp0Upgrade libpoppler-cpp0-32bitUpgrade libpoppler-qt4-develUpgrade libpoppler-qt5-develUpgrade libpoppler-qt6-develUpgrade poppler-toolsUpgrade libpoppler-qt5-1Upgrade libpoppler135Upgrade libpoppler-glib-develUpgrade libpoppler-qt4-4Upgrade libpoppler117Upgrade libpoppler-glib8Upgrade libpoppler126Upgrade libpoppler-develUpgrade libpoppler-qt6-3Upgrade libpoppler-qt5-1-32bitUpgrade libpoppler-glib8-32bitUpgrade typelib-1_0-Poppler-0_18Upgrade libpoppler60 | Dec 5, 2025 | Aug 13, 2025 |
| Ubuntu | — | Upgrade libpoppler58 (Ubuntu Pro)Upgrade libpoppler97 (Ubuntu Pro)Upgrade poppler-utils (Ubuntu Pro)Upgrade libpoppler73 (Ubuntu Pro)Upgrade libpoppler118Upgrade libpoppler147Upgrade poppler-utilsUpgrade libpoppler134 | Aug 22, 2025 | Aug 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub