Skip to content
OpenAdvisories
Medium USN-7675-1 1 CVE

poppler vulnerability

Published Jul 28, 2025 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

Kevin Backhouse discovered that poppler incorrectly handled documents with
a large number of annotations. If a user or automated system were tricked
into opening a specially crafted document, a remote attacker could use
this issue to cause poppler to consume resources, leading to a denial of
service, or possibly execute arbitrary code.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS poppler 22.02.0-2ubuntu0.9
Ubuntu · 24.04 LTS 24.04:LTS poppler 24.02.0-1ubuntu9.5

Vulnerabilities 1

  • Medium 5.5
    CVE-2025-52886

    Poppler Use After Free Vulnerability

    Poppler is a PDF rendering library. Versions prior to 25.06.0 use `std::atomic_int` for reference counting. Because `std::atomic_int` is only 32 bits, it is possible to overflow the reference count and trigger a use-after-free. Version 25.06.0 patches the iss…

    Poppler poppler poppler poppler Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2025-52886