Poppler is a PDF rendering library. Versions prior to 25.06.0 use `std::atomic_int` for reference counting. Because `std::atomic_int` is only 32 bits, it is possible to overflow the reference count and trigger a use-after-free. Version 25.06.0 patches the issue.
CVSS Details
- CVSS 4.0 Base Score: 5.5 (MEDIUM)
- CVSS 4.0 Vector: (CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | debian-upgrade-popplerno-fix-debian-deb-package | Jul 4, 2025 | Jul 2, 2025 | |
| Gentoo Linux | gentoo-linux-upgrade-app-text-poppler | Nov 25, 2025 | Sep 17, 2025 | |
| Redhat_linux | no-fix-redhat-rpm-package | Jul 9, 2025 | Jul 2, 2025 | |
| Suse | — | suse-upgrade-libpoppler-cpp0suse-upgrade-libpoppler-cpp0-32bitsuse-upgrade-libpoppler-cpp2suse-upgrade-libpoppler-develsuse-upgrade-libpoppler-glib-develsuse-upgrade-libpoppler-glib8suse-upgrade-libpoppler-glib8-32bitsuse-upgrade-libpoppler-qt4-4suse-upgrade-libpoppler-qt4-develsuse-upgrade-libpoppler-qt5-1suse-upgrade-libpoppler-qt5-1-32bitsuse-upgrade-libpoppler-qt5-develsuse-upgrade-libpoppler-qt6-3suse-upgrade-libpoppler-qt6-develsuse-upgrade-libpoppler117suse-upgrade-libpoppler126suse-upgrade-libpoppler135suse-upgrade-libpoppler135-32bitsuse-upgrade-libpoppler148suse-upgrade-libpoppler60suse-upgrade-libpoppler89suse-upgrade-poppler-toolssuse-upgrade-typelib-1_0-poppler-0_18 | Dec 5, 2025 | Jul 15, 2025 |
| Ubuntu | ubuntu-pro-upgrade-libpoppler58ubuntu-pro-upgrade-libpoppler73ubuntu-pro-upgrade-libpoppler97ubuntu-pro-upgrade-poppler-utilsubuntu-upgrade-libpoppler118ubuntu-upgrade-libpoppler134ubuntu-upgrade-libpoppler147ubuntu-upgrade-poppler-utils | Jul 28, 2025 | Jul 2, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub