Summary
It was discovered that poppler incorrectly handled certain PDF files. If a
user or automated system were tricked into opening a specially crafted
document, a remote attacker could use this issue to cause poppler to crash,
leading to a denial of service.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | poppler | 22.02.0-2ubuntu0.11 |
| Ubuntu · 24.04 LTS 24.04:LTS | poppler | 24.02.0-1ubuntu9.7 |
Vulnerabilities 1
-
Low 2.9
Poppler 24.06.1 through 25.x before 25.04.0 allows stack consumption and a SIGSEGV via deeply nested structures within …
References
-
report
https://ubuntu.com/security/CVE-2025-43718