Skip to content
OpenAdvisories
Medium USN-7858-1 1 CVE

poppler vulnerability

Published Nov 5, 2025 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that poppler incorrectly handled certain PDF files.
An attacker could possibly use this issue to cause a crash.

Fixed packages 4

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS poppler 22.02.0-2ubuntu0.12
Ubuntu · 24.04 LTS 24.04:LTS poppler 24.02.0-1ubuntu9.8
Ubuntu · 25.10 poppler 25.03.0-10ubuntu0.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS poppler 0.86.1-0ubuntu1.7+esm3

Vulnerabilities 1

  • Medium 6.1
    CVE-2025-52885

    GHSL-2025-042: Poppler has Use-After-Free

    Poppler ia a library for rendering PDF files, and examining or modifying their structure. A use-after-free (write) vulnerability has been detected in versions Poppler prior to 25.10.0 within the StructTreeRoot class. The issue arises from the use of raw point…

    Poppler poppler poppler poppler Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2025-52885