Poppler ia a library for rendering PDF files, and examining or modifying their structure. A use-after-free (write) vulnerability has been detected in versions Poppler prior to 25.10.0 within the StructTreeRoot class. The issue arises from the use of raw pointers to elements of a `std::vector`, which can lead to dangling pointers when the vector is resized. The vulnerability stems from the way that refToParentMap stores references to `std::vector` elements using raw pointers. These pointers may become invalid when the vector is resized. This vulnerability is a common security problem involving the use of raw pointers to `std::vectors`. Internally, `std::vector `stores its elements in a dynamically allocated array. When the array reaches its capacity and a new element is added, the vector reallocates a larger block of memory and moves all the existing elements to the new location. At this point if any pointers to elements are stored before a resize occurs, they become dangling pointers once the reallocation happens. Version 25.10.0 contains a patch for the issue.
CVSS Details
- CVSS 4.0 Base Score: 6.1 (MEDIUM)
- CVSS 4.0 Vector: (CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade poppler | Jun 16, 2026 | Jun 16, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Oct 10, 2025 |
| Suse | — | Upgrade libpoppler135Upgrade libpoppler135-32bitUpgrade libpoppler-qt5-1Upgrade libpoppler-develUpgrade libpoppler-glib-develUpgrade libpoppler89Upgrade libpoppler-cpp0-32bitUpgrade libpoppler126Upgrade libpoppler-qt5-develUpgrade libpoppler-qt5-1-32bitUpgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-qt6-3Upgrade libpoppler-glib8Upgrade libpoppler-cpp0Upgrade libpoppler-glib8-32bitUpgrade poppler-toolsUpgrade libpoppler-qt6-devel | Dec 5, 2025 | Oct 24, 2025 |
| Ubuntu | — | Upgrade poppler-utilsUpgrade libpoppler134Upgrade libpoppler147Upgrade libpoppler118Upgrade libpoppler97 (Ubuntu Pro)Upgrade poppler-utils (Ubuntu Pro) | Nov 7, 2025 | Oct 10, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub