Poppler is a PDF rendering library. Versions prior to 25.06.0 use `std::atomic_int` for reference counting. Because `std::atomic_int` is only 32 bits, it is possible to overflow the reference count and trigger a use-after-free. Version 25.06.0 patches the issue.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade poppler | Jul 4, 2025 | Jul 2, 2025 |
| Gentoo Linux | — | Upgrade app-text/poppler. | Nov 25, 2025 | Sep 17, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 2, 2025 |
| Suse | — | Upgrade libpoppler-qt4-4Upgrade libpoppler-glib-develUpgrade libpoppler-cpp2Upgrade libpoppler-qt4-develUpgrade libpoppler117Upgrade libpoppler-develUpgrade libpoppler135Upgrade libpoppler-qt6-3Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-cpp0-32bitUpgrade libpoppler89Upgrade libpoppler-qt5-1Upgrade libpoppler-qt5-1-32bitUpgrade libpoppler-qt5-develUpgrade libpoppler-glib8Upgrade libpoppler126Upgrade libpoppler-cpp0Upgrade libpoppler60Upgrade libpoppler-glib8-32bitUpgrade libpoppler135-32bitUpgrade poppler-toolsUpgrade libpoppler-qt6-develUpgrade libpoppler148 | Dec 5, 2025 | Jul 15, 2025 |
| Ubuntu | — | Upgrade libpoppler58 (Ubuntu Pro)Upgrade poppler-utils (Ubuntu Pro)Upgrade libpoppler73 (Ubuntu Pro)Upgrade poppler-utilsUpgrade libpoppler134Upgrade libpoppler118Upgrade libpoppler147Upgrade libpoppler97 (Ubuntu Pro) | Jul 28, 2025 | Jul 2, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub