An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade poppler | Jul 23, 2026 | Jul 23, 2026 |
| Suse | — | Upgrade libpoppler126Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler60Upgrade libpoppler-qt4-4Upgrade libpoppler-qt5-1-32bitUpgrade libpoppler-glib-develUpgrade libpoppler-glib8-32bitUpgrade libpoppler-qt6-3Upgrade libpoppler117Upgrade libpoppler-glib8Upgrade libpoppler-develUpgrade libpoppler-qt5-develUpgrade libpoppler-qt6-develUpgrade libpoppler-cpp0-32bitUpgrade libpoppler-qt4-develUpgrade poppler-toolsUpgrade libpoppler135Upgrade libpoppler-qt5-1Upgrade libpoppler-cpp0Upgrade libpoppler135-32bit | Dec 5, 2025 | Aug 13, 2025 |
| Ubuntu | — | Upgrade libpoppler147Upgrade libpoppler134Upgrade poppler-utilsUpgrade libpoppler73 (Ubuntu Pro)Upgrade libpoppler97 (Ubuntu Pro)Upgrade libpoppler58 (Ubuntu Pro)Upgrade poppler-utils (Ubuntu Pro)Upgrade libpoppler118 | Aug 22, 2025 | Aug 20, 2025 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub