Every CVE Search/ Get API key

CVE-2025-50420

An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an...

6.5 MediumPublic exploitFix available

An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.37%Up 0.3 points since Aug 5, 2025
90%50%10%1%

What each source reports

CVE List Score used 6.5

An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).

Record
CVE-2025-50420
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-674
Updated
2026-11-02
EUVDEUVD-2025-23522 6.5

An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).

Record
EUVD-2025-23522
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-ppc9-vw33-pg6g 7.5

An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an...

An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).

Record
GHSA-ppc9-vw33-pg6g
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-400, CWE-674
Updated
2026-11-02
NVD 6.5

An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).

Record
CVE-2025-50420
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-674
Updated
2026-11-02
OSV 6.5

An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).

Record
CVE-2025-50420
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2025-50420 6.5

An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).

Record
DEBIAN-CVE-2025-50420
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 18 moreShow less
OSVJLSEC-2026-88 6.5

An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).

Record
JLSEC-2026-88
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-2033 6.5

poppler security update

is a PDF rendering library.

Security Fix(es):

An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).(CVE-2025-50420)

Record
OESA-2025-2033
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-2034 6.5

poppler security update

is a PDF rendering library.

Security Fix(es):

An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).(CVE-2025-50420)

Record
OESA-2025-2034
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-2035 6.5

poppler security update

is a PDF rendering library.

Security Fix(es):

An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).(CVE-2025-50420)

Record
OESA-2025-2035
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-2036 6.5

poppler security update

is a PDF rendering library.

Security Fix(es):

An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).(CVE-2025-50420)

Record
OESA-2025-2036
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-2037 6.5

poppler security update

is a PDF rendering library.

Security Fix(es):

An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).(CVE-2025-50420)

Record
OESA-2025-2037
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-2074 6.5

poppler security update

is a PDF rendering library.

Security Fix(es):

A vulnerability classified as problematic has been found in Freedesktop Poppler 25.04.0 (Document Reader Software).CWE is classifying the issue as CWE-674. The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.This is going to have an impact on availability.There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.(CVE-2025-50420)

Record
OESA-2025-2074
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2025-50420 6.5

An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).

Record
UBUNTU-CVE-2025-50420
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVCLSA-2026-1783441581 No score

poppler: Fix of CVE-2025-50420

  • CVE-2025-50420: fix crash in pdfseparate by skipping annotation entries missing both Type and SubType (PDFDoc::markAnnotations)
Record
CLSA-2026-1783441581
Updated
2026-11-02
OSVCLSA-2026-1783671750 No score

poppler: Fix of CVE-2025-50420

  • CVE-2025-50420: skip self-referential /Annots entries in PDFDoc::markAnnotations to prevent infinite recursion (denial of service) in pdfseparate
Record
CLSA-2026-1783671750
Updated
2026-11-02
OSVCLSA-2026-1786352279 No score

poppler: Fix of 2 CVEs

  • CVE-2025-50420: fix infinite recursion (uncontrolled recursion, CWE-674) in pdfseparate via crafted /Annots dictionaries in PDFDoc::markAnnotations, leading to denial of service
Record
CLSA-2026-1786352279
Updated
2026-11-02
OSVopenSUSE-SU-2025:15416-1 No score

libpoppler-cpp2-25.08.0-1.1 on GA media

These are all security issues fixed in the libpoppler-cpp2-25.08.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15416-1
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2025-50420 No score

CVE-2025-50420 in poppler - Patched by Root

Root has patched CVE-2025-50420 in the poppler package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2025-50420
Updated
2026-11-02
OSVSUSE-SU-2025:02788-1 No score

Security update for poppler

This update for poppler fixes the following issues:

  • CVE-2025-50420: Fixed Denial of Service in pdfseparate utility (bsc#1247590)
Record
SUSE-SU-2025:02788-1
Updated
2026-11-02
OSVSUSE-SU-2025:02789-1 No score

Security update for poppler

This update for poppler fixes the following issues:

  • CVE-2025-50420: Fixed Denial of Service in pdfseparate utility (bsc#1247590)
Record
SUSE-SU-2025:02789-1
Updated
2026-11-02
OSVSUSE-SU-2025:02790-1 No score

Security update for poppler

This update for poppler fixes the following issues:

  • CVE-2025-50420: Fixed Denial of Service in pdfseparate utility (bsc#1247590)
Record
SUSE-SU-2025:02790-1
Updated
2026-11-02
OSVSUSE-SU-2025:02791-1 No score

Security update for poppler

This update for poppler fixes the following issues:

  • CVE-2025-50420: Fixed Denial of Service in pdfseparate utility (bsc#1247590)
Record
SUSE-SU-2025:02791-1
Updated
2026-11-02
OSVUSN-7708-1 No score

poppler vulnerability

It was discovered that poppler incorrectly handled certain PDF files. An attacker could possibly use this issue to cause a denial of service.

Record
USN-7708-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
poppler
TuxCare:AlmaLinux:9.2
 before 21.01.0-14.el9_2.tuxcare.els6
21.01.0-14.el9_2.tuxcare.els6
poppler-cpp
TuxCare:AlmaLinux:9.2
 before 21.01.0-14.el9_2.tuxcare.els6
21.01.0-14.el9_2.tuxcare.els6
poppler-cpp-devel
TuxCare:AlmaLinux:9.2
 before 21.01.0-14.el9_2.tuxcare.els6
21.01.0-14.el9_2.tuxcare.els6
poppler-devel
TuxCare:AlmaLinux:9.2
 before 21.01.0-14.el9_2.tuxcare.els6
21.01.0-14.el9_2.tuxcare.els6
poppler-glib
TuxCare:AlmaLinux:9.2
 before 21.01.0-14.el9_2.tuxcare.els6
21.01.0-14.el9_2.tuxcare.els6
poppler-glib-devel
TuxCare:AlmaLinux:9.2
 before 21.01.0-14.el9_2.tuxcare.els6
21.01.0-14.el9_2.tuxcare.els6
poppler-glib-doc
TuxCare:AlmaLinux:9.2
 before 21.01.0-14.el9_2.tuxcare.els6
21.01.0-14.el9_2.tuxcare.els6
poppler-qt5
TuxCare:AlmaLinux:9.2
 before 21.01.0-14.el9_2.tuxcare.els6
21.01.0-14.el9_2.tuxcare.els6
poppler-qt5-devel
TuxCare:AlmaLinux:9.2
 before 21.01.0-14.el9_2.tuxcare.els6
21.01.0-14.el9_2.tuxcare.els6
poppler-utils
TuxCare:AlmaLinux:9.2
 before 21.01.0-14.el9_2.tuxcare.els6
21.01.0-14.el9_2.tuxcare.els6
Show 61 moreShow less
Affected packages
PackageAffectedFixed
poppler
TuxCare:AlmaLinux:9.6
 before 21.01.0-21.el9.tuxcare.els6
21.01.0-21.el9.tuxcare.els6
poppler-cpp
TuxCare:AlmaLinux:9.6
 before 21.01.0-21.el9.tuxcare.els6
21.01.0-21.el9.tuxcare.els6
poppler-cpp-devel
TuxCare:AlmaLinux:9.6
 before 21.01.0-21.el9.tuxcare.els6
21.01.0-21.el9.tuxcare.els6
poppler-devel
TuxCare:AlmaLinux:9.6
 before 21.01.0-21.el9.tuxcare.els6
21.01.0-21.el9.tuxcare.els6
poppler-glib
TuxCare:AlmaLinux:9.6
 before 21.01.0-21.el9.tuxcare.els6
21.01.0-21.el9.tuxcare.els6
poppler-glib-devel
TuxCare:AlmaLinux:9.6
 before 21.01.0-21.el9.tuxcare.els6
21.01.0-21.el9.tuxcare.els6
poppler-glib-doc
TuxCare:AlmaLinux:9.6
 before 21.01.0-21.el9.tuxcare.els6
21.01.0-21.el9.tuxcare.els6
poppler-qt5
TuxCare:AlmaLinux:9.6
 before 21.01.0-21.el9.tuxcare.els6
21.01.0-21.el9.tuxcare.els6
poppler-qt5-devel
TuxCare:AlmaLinux:9.6
 before 21.01.0-21.el9.tuxcare.els6
21.01.0-21.el9.tuxcare.els6
poppler-utils
TuxCare:AlmaLinux:9.6
 before 21.01.0-21.el9.tuxcare.els6
21.01.0-21.el9.tuxcare.els6
poppler
TuxCare:CentOS:7
 before 0.26.5-43.el7.1.tuxcare.els3
0.26.5-43.el7.1.tuxcare.els3
poppler-cpp
TuxCare:CentOS:7
 before 0.26.5-43.el7.1.tuxcare.els3
0.26.5-43.el7.1.tuxcare.els3
poppler-cpp-devel
TuxCare:CentOS:7
 before 0.26.5-43.el7.1.tuxcare.els3
0.26.5-43.el7.1.tuxcare.els3
poppler-demos
TuxCare:CentOS:7
 before 0.26.5-43.el7.1.tuxcare.els3
0.26.5-43.el7.1.tuxcare.els3
poppler-devel
TuxCare:CentOS:7
 before 0.26.5-43.el7.1.tuxcare.els3
0.26.5-43.el7.1.tuxcare.els3
poppler-glib
TuxCare:CentOS:7
 before 0.26.5-43.el7.1.tuxcare.els3
0.26.5-43.el7.1.tuxcare.els3
poppler-glib-devel
TuxCare:CentOS:7
 before 0.26.5-43.el7.1.tuxcare.els3
0.26.5-43.el7.1.tuxcare.els3
poppler-qt
TuxCare:CentOS:7
 before 0.26.5-43.el7.1.tuxcare.els3
0.26.5-43.el7.1.tuxcare.els3
poppler-qt-devel
TuxCare:CentOS:7
 before 0.26.5-43.el7.1.tuxcare.els3
0.26.5-43.el7.1.tuxcare.els3
poppler-utils
TuxCare:CentOS:7
 before 0.26.5-43.el7.1.tuxcare.els3
0.26.5-43.el7.1.tuxcare.els3
poppler
Debian:12
 before 22.12.0-2+deb12u3, plus listed versions
22.12.0-222.12.0-2+deb12u122.12.0-2+deb12u2
22.12.0-2+deb12u3
poppler
Debian:13
 before 25.03.0-5+deb13u2, plus listed versions
25.03.0-5
25.03.0-5+deb13u2
poppler
Debian:14
 before 25.03.0-6, plus listed versions
25.03.0-5
25.03.0-6
Poppler_jll
Julia
 before 25.10.0+0
25.10.0+0
poppler
openEuler:22.03-LTS-SP4
 before 0.90.0-13.oe2203sp4
0.90.0-13.oe2203sp4
poppler
openEuler:24.03-LTS
 before 23.12.0-10.oe2403
23.12.0-10.oe2403
poppler
openEuler:24.03-LTS-SP1
 before 23.12.0-10.oe2403sp1
23.12.0-10.oe2403sp1
poppler
openEuler:24.03-LTS-SP2
 before 23.12.0-10.oe2403sp2
23.12.0-10.oe2403sp2
poppler
openEuler:22.03-LTS-SP3
 before 0.90.0-13.oe2203sp3
0.90.0-13.oe2203sp3
poppler
openEuler:20.03-LTS-SP4
 before 0.90.0-13.oe2003sp4
0.90.0-13.oe2003sp4
poppler
SUSE:Linux Enterprise Server 12 SP5-LTSS
 before 0.43.0-16.64.1
0.43.0-16.64.1
poppler-qt
SUSE:Linux Enterprise Server 12 SP5-LTSS
 before 0.43.0-16.64.1
0.43.0-16.64.1
poppler
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
 before 0.43.0-16.64.1
0.43.0-16.64.1
poppler-qt
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
 before 0.43.0-16.64.1
0.43.0-16.64.1
poppler
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
 before 23.01.0-150500.3.23.1
23.01.0-150500.3.23.1
poppler
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
 before 23.01.0-150500.3.23.1
23.01.0-150500.3.23.1
poppler
SUSE:Linux Enterprise Server 15 SP5-LTSS
 before 23.01.0-150500.3.23.1
23.01.0-150500.3.23.1
poppler
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
 before 23.01.0-150500.3.23.1
23.01.0-150500.3.23.1
poppler
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
 before 22.01.0-150400.3.38.1
22.01.0-150400.3.38.1
poppler
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
 before 22.01.0-150400.3.38.1
22.01.0-150400.3.38.1
poppler
SUSE:Linux Enterprise Server 15 SP4-LTSS
 before 22.01.0-150400.3.38.1
22.01.0-150400.3.38.1
poppler
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
 before 22.01.0-150400.3.38.1
22.01.0-150400.3.38.1
poppler
SUSE:Manager Proxy LTS 4.3
 before 22.01.0-150400.3.38.1
22.01.0-150400.3.38.1
poppler
SUSE:Manager Server LTS 4.3
 before 22.01.0-150400.3.38.1
22.01.0-150400.3.38.1
poppler
SUSE:Linux Enterprise Module for Basesystem 15 SP6
 before 24.03.0-150600.3.19.1
24.03.0-150600.3.19.1
poppler
SUSE:Linux Enterprise Module for Basesystem 15 SP7
 before 24.03.0-150600.3.19.1
24.03.0-150600.3.19.1
poppler
SUSE:Linux Enterprise Module for Package Hub 15 SP6
 before 24.03.0-150600.3.19.1
24.03.0-150600.3.19.1
poppler-qt5
SUSE:Linux Enterprise Module for Package Hub 15 SP6
 before 24.03.0-150600.3.19.1
24.03.0-150600.3.19.1
poppler-qt6
SUSE:Linux Enterprise Module for Package Hub 15 SP6
 before 24.03.0-150600.3.19.1
24.03.0-150600.3.19.1
poppler
SUSE:Linux Enterprise Module for Package Hub 15 SP7
 before 24.03.0-150600.3.19.1
24.03.0-150600.3.19.1
poppler-qt5
SUSE:Linux Enterprise Module for Package Hub 15 SP7
 before 24.03.0-150600.3.19.1
24.03.0-150600.3.19.1
poppler-qt6
SUSE:Linux Enterprise Module for Package Hub 15 SP7
 before 24.03.0-150600.3.19.1
24.03.0-150600.3.19.1
poppler
openSUSE:Leap 15.6
 before 24.03.0-150600.3.19.1
24.03.0-150600.3.19.1
poppler-qt5
openSUSE:Leap 15.6
 before 24.03.0-150600.3.19.1
24.03.0-150600.3.19.1
poppler-qt6
openSUSE:Leap 15.6
 before 24.03.0-150600.3.19.1
24.03.0-150600.3.19.1
poppler
Ubuntu:Pro:16.04:LTS
 before 0.41.0-0ubuntu1.16+esm8, plus listed versions
0.33.0-0ubuntu30.37.0-0ubuntu10.38.0-0ubuntu10.41.0-0ubuntu10.41.0-0ubuntu1.1
Show 22 moreShow less
0.41.0-0ubuntu1.20.41.0-0ubuntu1.30.41.0-0ubuntu1.40.41.0-0ubuntu1.50.41.0-0ubuntu1.60.41.0-0ubuntu1.70.41.0-0ubuntu1.80.41.0-0ubuntu1.90.41.0-0ubuntu1.100.41.0-0ubuntu1.110.41.0-0ubuntu1.120.41.0-0ubuntu1.130.41.0-0ubuntu1.140.41.0-0ubuntu1.150.41.0-0ubuntu1.160.41.0-0ubuntu1.16+esm10.41.0-0ubuntu1.16+esm20.41.0-0ubuntu1.16+esm30.41.0-0ubuntu1.16+esm40.41.0-0ubuntu1.16+esm50.41.0-0ubuntu1.16+esm60.41.0-0ubuntu1.16+esm7
0.41.0-0ubuntu1.16+esm8
poppler
Ubuntu:Pro:18.04:LTS
 before 0.62.0-2ubuntu2.14+esm8, plus listed versions
0.57.0-2ubuntu40.57.0-2ubuntu50.62.0-1ubuntu10.62.0-2ubuntu10.62.0-2ubuntu2
Show 20 moreShow less
0.62.0-2ubuntu2.10.62.0-2ubuntu2.20.62.0-2ubuntu2.40.62.0-2ubuntu2.50.62.0-2ubuntu2.60.62.0-2ubuntu2.70.62.0-2ubuntu2.80.62.0-2ubuntu2.90.62.0-2ubuntu2.100.62.0-2ubuntu2.110.62.0-2ubuntu2.120.62.0-2ubuntu2.130.62.0-2ubuntu2.140.62.0-2ubuntu2.14+esm10.62.0-2ubuntu2.14+esm20.62.0-2ubuntu2.14+esm30.62.0-2ubuntu2.14+esm40.62.0-2ubuntu2.14+esm50.62.0-2ubuntu2.14+esm60.62.0-2ubuntu2.14+esm7
0.62.0-2ubuntu2.14+esm8
poppler
Ubuntu:Pro:20.04:LTS
 before 0.86.1-0ubuntu1.7+esm2, plus listed versions
0.80.0-0ubuntu10.80.0-0ubuntu30.80.0-0ubuntu40.80.0-0ubuntu50.85.0-1ubuntu1
Show 10 moreShow less
0.85.0-1ubuntu30.86.1-0ubuntu10.86.1-0ubuntu1.10.86.1-0ubuntu1.20.86.1-0ubuntu1.30.86.1-0ubuntu1.40.86.1-0ubuntu1.50.86.1-0ubuntu1.60.86.1-0ubuntu1.70.86.1-0ubuntu1.7+esm1
0.86.1-0ubuntu1.7+esm2
poppler
Ubuntu:22.04:LTS
 before 22.02.0-2ubuntu0.10, plus listed versions
21.06.1-121.11.0-1~ubuntu222.02.0-222.02.0-2ubuntu0.122.02.0-2ubuntu0.2
Show 7 moreShow less
22.02.0-2ubuntu0.322.02.0-2ubuntu0.422.02.0-2ubuntu0.522.02.0-2ubuntu0.622.02.0-2ubuntu0.722.02.0-2ubuntu0.822.02.0-2ubuntu0.9
22.02.0-2ubuntu0.10
poppler
Ubuntu:24.04:LTS
 before 24.02.0-1ubuntu9.6, plus listed versions
23.08.0-2ubuntu123.12.0-1ubuntu224.02.0-1ubuntu224.02.0-1ubuntu824.02.0-1ubuntu9
Show 5 moreShow less
24.02.0-1ubuntu9.124.02.0-1ubuntu9.224.02.0-1ubuntu9.324.02.0-1ubuntu9.424.02.0-1ubuntu9.5
24.02.0-1ubuntu9.6
poppler
openSUSE:Tumbleweed
 before 25.08.0-1.1
25.08.0-1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubLandw-hub/CVE-2025-504202025-08-01

History

History
RecordedChangedSources
affected
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-50420 is a medium vulnerability (CVSS 6.5) in Freedesktop Poppler, published August 4, 2025. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.37%, the 31st percentile. Fixed in poppler 21.01.0-14.el9_2.tuxcare.els6.

References

Show 20 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open