Every CVE Search/ Get API key

CVE-2025-52886

Poppler Use After Free Vulnerability

5.5 MediumFix available

Poppler is a PDF rendering library. Versions prior to 25.06.0 use std::atomic_int for reference counting. Because std::atomic_int is only 32 bits, it is possible to overflow the reference count and trigger a use-after-free. Version 25.06.0 patches the issue.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.45%Up 0.4 points since Jul 3, 2025
90%50%10%1%

What each source reports

CVE List Score used 5.5

Poppler Use After Free Vulnerability

Poppler is a PDF rendering library. Versions prior to 25.06.0 use std::atomic_int for reference counting. Because std::atomic_int is only 32 bits, it is possible to overflow the reference count and trigger a use-after-free. Version 25.06.0 patches the issue.

Record
CVE-2025-52886
CVSS 4.0
5.5 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P
Weakness
CWE-416
Updated
2026-11-02
EUVDEUVD-2025-19742 5.5

Poppler is a PDF rendering library. Versions prior to 25.06.0 use std::atomic_int for reference counting. Because std::atomic_int is only 32 bits, it is possible to overflow the reference count and trigger a use-after-free. Version 25.06.0 patches the issue.

Record
EUVD-2025-19742
CVSS 4.0
5.5 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P
Updated
2026-11-02
NVD 5.5

Poppler is a PDF rendering library. Versions prior to 25.06.0 use std::atomic_int for reference counting. Because std::atomic_int is only 32 bits, it is possible to overflow the reference count and trigger a use-after-free. Version 25.06.0 patches the issue.

Record
CVE-2025-52886
CVSS 4.0
5.5 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-416
Updated
2026-11-02
OSVBELL-CVE-2025-52886 5.9
Record
BELL-CVE-2025-52886
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 5.5

Poppler Use After Free Vulnerability

Poppler is a PDF rendering library. Versions prior to 25.06.0 use std::atomic_int for reference counting. Because std::atomic_int is only 32 bits, it is possible to overflow the reference count and trigger a use-after-free. Version 25.06.0 patches the issue.

Record
CVE-2025-52886
CVSS 4.0
5.5 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P
Weakness
CWE-416
Updated
2026-11-02
OSVDEBIAN-CVE-2025-52886 5.9

Poppler is a PDF rendering library. Versions prior to 25.06.0 use std::atomic_int for reference counting. Because std::atomic_int is only 32 bits, it is possible to overflow the reference count and trigger a use-after-free. Version 25.06.0 patches the issue.

Record
DEBIAN-CVE-2025-52886
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 15 moreShow less
OSVJLSEC-2026-90 5.5

Poppler is a PDF rendering library. Versions prior to 25.06.0 use std::atomic_int for reference counting. Because std::atomic_int is only 32 bits, it is possible to overflow the reference count and trigger a use-after-free. Version 25.06.0 patches the issue.

Record
JLSEC-2026-90
CVSS 4.0
5.5 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-1955 4.0

poppler security update

is a PDF rendering library.

Security Fix(es):

Poppler is a PDF rendering library. Versions prior to 25.06.0 use std::atomic_int for reference counting. Because std::atomic_int is only 32 bits, it is possible to overflow the reference count and trigger a use-after-free. Version 25.06.0 patches the issue.(CVE-2025-52886)

Record
OESA-2025-1955
CVSS 3.1
4.0 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVUBUNTU-CVE-2025-52886 5.5

Poppler is a PDF rendering library. Versions prior to 25.06.0 use std::atomic_int for reference counting. Because std::atomic_int is only 32 bits, it is possible to overflow the reference count and trigger a use-after-free. Version 25.06.0 patches the issue.

Record
UBUNTU-CVE-2025-52886
CVSS 4.0
5.5 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVCLSA-2025-1765377802 No score

poppler: Fix of CVE-2025-52886

  • CVE-2025-52886: limit amount of annotations per page/document to mitigate out-of-memory
Record
CLSA-2025-1765377802
Updated
2026-11-02
OSVCLSA-2026-1775817651 No score

poppler: Fix of CVE-2025-52886

  • CVE-2025-52886: limit amount of annotations per document/page to prevent use-after-free via reference count overflow
Record
CLSA-2026-1775817651
Updated
2026-11-02
OSVMGASA-2025-0214 No score

Updated poppler packages fix security vulnerabilities

poppler uses std::atomic_int for reference counting. Because it is only 32 bits, it is possible to overflow the reference count and trigger a use-after-free.

Record
MGASA-2025-0214
Updated
2026-11-02
OSVopenSUSE-SU-2025:15323-1 No score

libpoppler-cpp2-25.06.0-1.1 on GA media

These are all security issues fixed in the libpoppler-cpp2-25.06.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15323-1
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2025-52886 No score

CVE-2025-52886 in poppler - Patched by Root

Root has patched CVE-2025-52886 in the poppler package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2025-52886
Updated
2026-11-02
OSVSUSE-SU-2025:02317-1 No score

Security update for poppler

This update for poppler fixes the following issues:

  • CVE-2025-52886: Fixed an integer overflow that can lead to a use-after-free. (bsc#1245625)
Record
SUSE-SU-2025:02317-1
Updated
2026-11-02
OSVSUSE-SU-2025:02318-1 No score

Security update for poppler

This update for poppler fixes the following issues:

  • CVE-2025-52886: Fixed an integer overflow that can lead to a use-after-free. (bsc#1245625)
Record
SUSE-SU-2025:02318-1
Updated
2026-11-02
OSVSUSE-SU-2025:02324-1 No score

Security update for poppler

This update for poppler fixes the following issues:

  • CVE-2025-52886: Fixed an integer overflow that can lead to a use-after-free. (bsc#1245625)
Record
SUSE-SU-2025:02324-1
Updated
2026-11-02
OSVSUSE-SU-2025:02356-1 No score

Security update for poppler

This update for poppler fixes the following issues:

  • CVE-2025-52886: Fixed an integer overflow that can lead to a use-after-free. (bsc#1245625)
Record
SUSE-SU-2025:02356-1
Updated
2026-11-02
OSVSUSE-SU-2025:02357-1 No score

Security update for poppler

This update for poppler fixes the following issues:

  • CVE-2025-52886: Fixed an integer overflow that can lead to a use-after-free. (bsc#1245625)
Record
SUSE-SU-2025:02357-1
Updated
2026-11-02
OSVUSN-7675-1 No score

poppler vulnerability

Kevin Backhouse discovered that poppler incorrectly handled documents with a large number of annotations. If a user or automated system were tricked into opening a specially crafted document, a remote attacker could use this issue to cause poppler to consume resources, leading to a denial of service, or possibly execute arbitrary code.

Record
USN-7675-1
Updated
2026-11-02
OSVUSN-7687-1 No score

poppler vulnerabilities

Jieyong Ma discovered that poppler incorrectly handled certain malformed PDF files. A remote attacker could possibly use this issue to cause poppler to crash, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2022-27337)

Kevin Backhouse discovered that poppler incorrectly handled documents with a large number of annotations. If a user or automated system were tricked into opening a specially crafted document, a remote attacker could use this issue to cause poppler to consume resources, leading to a denial of service, or possibly execute arbitrary code. (CVE-2025-52886)

Record
USN-7687-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
poppler
Alpaquita:stream
 23.03.0-r1 up to 25.06.0-r0
25.06.0-r0
poppler
TuxCare:AlmaLinux:9.2
 before 21.01.0-14.el9.tuxcare.els3
21.01.0-14.el9.tuxcare.els3
poppler-cpp
TuxCare:AlmaLinux:9.2
 before 21.01.0-14.el9.tuxcare.els3
21.01.0-14.el9.tuxcare.els3
poppler-cpp-devel
TuxCare:AlmaLinux:9.2
 before 21.01.0-14.el9.tuxcare.els3
21.01.0-14.el9.tuxcare.els3
poppler-devel
TuxCare:AlmaLinux:9.2
 before 21.01.0-14.el9.tuxcare.els3
21.01.0-14.el9.tuxcare.els3
poppler-glib
TuxCare:AlmaLinux:9.2
 before 21.01.0-14.el9.tuxcare.els3
21.01.0-14.el9.tuxcare.els3
poppler-glib-devel
TuxCare:AlmaLinux:9.2
 before 21.01.0-14.el9.tuxcare.els3
21.01.0-14.el9.tuxcare.els3
poppler-glib-doc
TuxCare:AlmaLinux:9.2
 before 21.01.0-14.el9.tuxcare.els3
21.01.0-14.el9.tuxcare.els3
poppler-qt5
TuxCare:AlmaLinux:9.2
 before 21.01.0-14.el9.tuxcare.els3
21.01.0-14.el9.tuxcare.els3
poppler-qt5-devel
TuxCare:AlmaLinux:9.2
 before 21.01.0-14.el9.tuxcare.els3
21.01.0-14.el9.tuxcare.els3
Show 72 moreShow less
Affected packages
PackageAffectedFixed
poppler-utils
TuxCare:AlmaLinux:9.2
 before 21.01.0-14.el9.tuxcare.els3
21.01.0-14.el9.tuxcare.els3
poppler
TuxCare:AlmaLinux:9.6
 before 21.01.0-21.el9.tuxcare.els2
21.01.0-21.el9.tuxcare.els2
poppler-cpp
TuxCare:AlmaLinux:9.6
 before 21.01.0-21.el9.tuxcare.els2
21.01.0-21.el9.tuxcare.els2
poppler-cpp-devel
TuxCare:AlmaLinux:9.6
 before 21.01.0-21.el9.tuxcare.els2
21.01.0-21.el9.tuxcare.els2
poppler-devel
TuxCare:AlmaLinux:9.6
 before 21.01.0-21.el9.tuxcare.els2
21.01.0-21.el9.tuxcare.els2
poppler-glib
TuxCare:AlmaLinux:9.6
 before 21.01.0-21.el9.tuxcare.els2
21.01.0-21.el9.tuxcare.els2
poppler-glib-devel
TuxCare:AlmaLinux:9.6
 before 21.01.0-21.el9.tuxcare.els2
21.01.0-21.el9.tuxcare.els2
poppler-glib-doc
TuxCare:AlmaLinux:9.6
 before 21.01.0-21.el9.tuxcare.els2
21.01.0-21.el9.tuxcare.els2
poppler-qt5
TuxCare:AlmaLinux:9.6
 before 21.01.0-21.el9.tuxcare.els2
21.01.0-21.el9.tuxcare.els2
poppler-qt5-devel
TuxCare:AlmaLinux:9.6
 before 21.01.0-21.el9.tuxcare.els2
21.01.0-21.el9.tuxcare.els2
poppler-utils
TuxCare:AlmaLinux:9.6
 before 21.01.0-21.el9.tuxcare.els2
21.01.0-21.el9.tuxcare.els2
poppler
Debian:12
 before 22.12.0-2+deb12u3, plus listed versions
22.12.0-222.12.0-2+deb12u122.12.0-2+deb12u2
22.12.0-2+deb12u3
poppler
Debian:13
 before 25.03.0-5
25.03.0-5
poppler
Debian:14
 before 25.03.0-5
25.03.0-5
Poppler_jll
Julia
 before 25.10.0+0
25.10.0+0
poppler
Mageia:9
 before 23.02.0-1.7.mga9
23.02.0-1.7.mga9
poppler
openEuler:24.03-LTS-SP1
 before 23.12.0-9.oe2403sp1
23.12.0-9.oe2403sp1
poppler
openEuler:24.03-LTS-SP2
 before 23.12.0-9.oe2403sp2
23.12.0-9.oe2403sp2
poppler
openEuler:20.03-LTS-SP4
 before 0.90.0-12.oe2003sp4
0.90.0-12.oe2003sp4
poppler
openEuler:22.03-LTS-SP3
 before 0.90.0-12.oe2203sp3
0.90.0-12.oe2203sp3
poppler
openEuler:22.03-LTS-SP4
 before 0.90.0-12.oe2203sp4
0.90.0-12.oe2203sp4
poppler
openEuler:24.03-LTS
 before 23.12.0-9.oe2403
23.12.0-9.oe2403
poppler
SUSE:Linux Enterprise Server 12 SP5-LTSS
 before 0.43.0-16.58.2
0.43.0-16.58.2
poppler-qt
SUSE:Linux Enterprise Server 12 SP5-LTSS
 before 0.43.0-16.58.2
0.43.0-16.58.2
poppler
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
 before 0.43.0-16.58.2
0.43.0-16.58.2
poppler-qt
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
 before 0.43.0-16.58.2
0.43.0-16.58.2
poppler
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
 before 23.01.0-150500.3.20.1
23.01.0-150500.3.20.1
poppler
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
 before 23.01.0-150500.3.20.1
23.01.0-150500.3.20.1
poppler
SUSE:Linux Enterprise Server 15 SP5-LTSS
 before 23.01.0-150500.3.20.1
23.01.0-150500.3.20.1
poppler
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
 before 23.01.0-150500.3.20.1
23.01.0-150500.3.20.1
poppler
SUSE:Linux Enterprise Module for Basesystem 15 SP6
 before 24.03.0-150600.3.16.1
24.03.0-150600.3.16.1
poppler
SUSE:Linux Enterprise Module for Basesystem 15 SP7
 before 24.03.0-150600.3.16.1
24.03.0-150600.3.16.1
poppler
SUSE:Linux Enterprise Module for Package Hub 15 SP6
 before 24.03.0-150600.3.16.1
24.03.0-150600.3.16.1
poppler-qt5
SUSE:Linux Enterprise Module for Package Hub 15 SP6
 before 24.03.0-150600.3.16.1
24.03.0-150600.3.16.1
poppler-qt6
SUSE:Linux Enterprise Module for Package Hub 15 SP6
 before 24.03.0-150600.3.16.1
24.03.0-150600.3.16.1
poppler
SUSE:Linux Enterprise Module for Package Hub 15 SP7
 before 24.03.0-150600.3.16.1
24.03.0-150600.3.16.1
poppler-qt5
SUSE:Linux Enterprise Module for Package Hub 15 SP7
 before 24.03.0-150600.3.16.1
24.03.0-150600.3.16.1
poppler-qt6
SUSE:Linux Enterprise Module for Package Hub 15 SP7
 before 24.03.0-150600.3.16.1
24.03.0-150600.3.16.1
poppler
openSUSE:Leap 15.6
 before 24.03.0-150600.3.16.1
24.03.0-150600.3.16.1
poppler-qt5
openSUSE:Leap 15.6
 before 24.03.0-150600.3.16.1
24.03.0-150600.3.16.1
poppler-qt6
openSUSE:Leap 15.6
 before 24.03.0-150600.3.16.1
24.03.0-150600.3.16.1
poppler
SUSE:Linux Enterprise Module for Basesystem 15 SP6
 before 0.79.0-150200.3.41.1
0.79.0-150200.3.41.1
poppler
SUSE:Linux Enterprise Module for Basesystem 15 SP7
 before 0.79.0-150200.3.41.1
0.79.0-150200.3.41.1
poppler
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 0.79.0-150200.3.41.1
0.79.0-150200.3.41.1
poppler
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
 before 0.79.0-150200.3.41.1
0.79.0-150200.3.41.1
poppler
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
 before 0.79.0-150200.3.41.1
0.79.0-150200.3.41.1
poppler
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
 before 0.79.0-150200.3.41.1
0.79.0-150200.3.41.1
poppler
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
 before 0.79.0-150200.3.41.1
0.79.0-150200.3.41.1
poppler
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 0.79.0-150200.3.41.1
0.79.0-150200.3.41.1
poppler
SUSE:Linux Enterprise Server 15 SP4-LTSS
 before 0.79.0-150200.3.41.1
0.79.0-150200.3.41.1
poppler
SUSE:Linux Enterprise Server 15 SP5-LTSS
 before 0.79.0-150200.3.41.1
0.79.0-150200.3.41.1
poppler
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
 before 0.79.0-150200.3.41.1
0.79.0-150200.3.41.1
poppler
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
 before 0.79.0-150200.3.41.1
0.79.0-150200.3.41.1
poppler
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
 before 0.79.0-150200.3.41.1
0.79.0-150200.3.41.1
poppler
SUSE:Manager Proxy 4.3
 before 0.79.0-150200.3.41.1
0.79.0-150200.3.41.1
poppler
SUSE:Manager Server 4.3
 before 0.79.0-150200.3.41.1
0.79.0-150200.3.41.1
poppler
SUSE:Enterprise Storage 7.1
 before 0.79.0-150200.3.41.1
0.79.0-150200.3.41.1
poppler
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
 before 22.01.0-150400.3.31.1
22.01.0-150400.3.31.1
poppler
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
 before 22.01.0-150400.3.31.1
22.01.0-150400.3.31.1
poppler
SUSE:Linux Enterprise Server 15 SP4-LTSS
 before 22.01.0-150400.3.31.1
22.01.0-150400.3.31.1
poppler
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
 before 22.01.0-150400.3.31.1
22.01.0-150400.3.31.1
poppler
SUSE:Manager Proxy 4.3
 before 22.01.0-150400.3.31.1
22.01.0-150400.3.31.1
poppler
SUSE:Manager Server 4.3
 before 22.01.0-150400.3.31.1
22.01.0-150400.3.31.1
poppler
Ubuntu:Pro:16.04:LTS
 before 0.41.0-0ubuntu1.16+esm7, plus listed versions
0.33.0-0ubuntu30.37.0-0ubuntu10.38.0-0ubuntu10.41.0-0ubuntu10.41.0-0ubuntu1.1
Show 21 moreShow less
0.41.0-0ubuntu1.20.41.0-0ubuntu1.30.41.0-0ubuntu1.40.41.0-0ubuntu1.50.41.0-0ubuntu1.60.41.0-0ubuntu1.70.41.0-0ubuntu1.80.41.0-0ubuntu1.90.41.0-0ubuntu1.100.41.0-0ubuntu1.110.41.0-0ubuntu1.120.41.0-0ubuntu1.130.41.0-0ubuntu1.140.41.0-0ubuntu1.150.41.0-0ubuntu1.160.41.0-0ubuntu1.16+esm10.41.0-0ubuntu1.16+esm20.41.0-0ubuntu1.16+esm30.41.0-0ubuntu1.16+esm40.41.0-0ubuntu1.16+esm50.41.0-0ubuntu1.16+esm6
0.41.0-0ubuntu1.16+esm7
poppler
Ubuntu:Pro:18.04:LTS
 before 0.62.0-2ubuntu2.14+esm7, plus listed versions
0.57.0-2ubuntu40.57.0-2ubuntu50.62.0-1ubuntu10.62.0-2ubuntu10.62.0-2ubuntu2
Show 19 moreShow less
0.62.0-2ubuntu2.10.62.0-2ubuntu2.20.62.0-2ubuntu2.40.62.0-2ubuntu2.50.62.0-2ubuntu2.60.62.0-2ubuntu2.70.62.0-2ubuntu2.80.62.0-2ubuntu2.90.62.0-2ubuntu2.100.62.0-2ubuntu2.110.62.0-2ubuntu2.120.62.0-2ubuntu2.130.62.0-2ubuntu2.140.62.0-2ubuntu2.14+esm10.62.0-2ubuntu2.14+esm20.62.0-2ubuntu2.14+esm30.62.0-2ubuntu2.14+esm40.62.0-2ubuntu2.14+esm50.62.0-2ubuntu2.14+esm6
0.62.0-2ubuntu2.14+esm7
poppler
Ubuntu:Pro:20.04:LTS
 before 0.86.1-0ubuntu1.7+esm1, plus listed versions
0.80.0-0ubuntu10.80.0-0ubuntu30.80.0-0ubuntu40.80.0-0ubuntu50.85.0-1ubuntu1
Show 9 moreShow less
0.85.0-1ubuntu30.86.1-0ubuntu10.86.1-0ubuntu1.10.86.1-0ubuntu1.20.86.1-0ubuntu1.30.86.1-0ubuntu1.40.86.1-0ubuntu1.50.86.1-0ubuntu1.60.86.1-0ubuntu1.7
0.86.1-0ubuntu1.7+esm1
poppler
Ubuntu:22.04:LTS
 before 22.02.0-2ubuntu0.9, plus listed versions
21.06.1-121.11.0-1~ubuntu222.02.0-222.02.0-2ubuntu0.122.02.0-2ubuntu0.2
Show 6 moreShow less
22.02.0-2ubuntu0.322.02.0-2ubuntu0.422.02.0-2ubuntu0.522.02.0-2ubuntu0.622.02.0-2ubuntu0.722.02.0-2ubuntu0.8
22.02.0-2ubuntu0.9
poppler
Ubuntu:24.04:LTS
 before 24.02.0-1ubuntu9.5, plus listed versions
23.08.0-2ubuntu123.12.0-1ubuntu224.02.0-1ubuntu224.02.0-1ubuntu824.02.0-1ubuntu9
Show 4 moreShow less
24.02.0-1ubuntu9.124.02.0-1ubuntu9.224.02.0-1ubuntu9.324.02.0-1ubuntu9.4
24.02.0-1ubuntu9.5
poppler
Ubuntu:Pro:16.04:LTS
From an advisory covering 2 CVEs
 before 0.41.0-0ubuntu1.16+esm7, plus listed versions
0.33.0-0ubuntu30.37.0-0ubuntu10.38.0-0ubuntu10.41.0-0ubuntu10.41.0-0ubuntu1.1
Show 21 moreShow less
0.41.0-0ubuntu1.20.41.0-0ubuntu1.30.41.0-0ubuntu1.40.41.0-0ubuntu1.50.41.0-0ubuntu1.60.41.0-0ubuntu1.70.41.0-0ubuntu1.80.41.0-0ubuntu1.90.41.0-0ubuntu1.100.41.0-0ubuntu1.110.41.0-0ubuntu1.120.41.0-0ubuntu1.130.41.0-0ubuntu1.140.41.0-0ubuntu1.150.41.0-0ubuntu1.160.41.0-0ubuntu1.16+esm10.41.0-0ubuntu1.16+esm20.41.0-0ubuntu1.16+esm30.41.0-0ubuntu1.16+esm40.41.0-0ubuntu1.16+esm50.41.0-0ubuntu1.16+esm6
0.41.0-0ubuntu1.16+esm7
poppler
Ubuntu:Pro:18.04:LTS
From an advisory covering 2 CVEs
 before 0.62.0-2ubuntu2.14+esm7, plus listed versions
0.57.0-2ubuntu40.57.0-2ubuntu50.62.0-1ubuntu10.62.0-2ubuntu10.62.0-2ubuntu2
Show 19 moreShow less
0.62.0-2ubuntu2.10.62.0-2ubuntu2.20.62.0-2ubuntu2.40.62.0-2ubuntu2.50.62.0-2ubuntu2.60.62.0-2ubuntu2.70.62.0-2ubuntu2.80.62.0-2ubuntu2.90.62.0-2ubuntu2.100.62.0-2ubuntu2.110.62.0-2ubuntu2.120.62.0-2ubuntu2.130.62.0-2ubuntu2.140.62.0-2ubuntu2.14+esm10.62.0-2ubuntu2.14+esm20.62.0-2ubuntu2.14+esm30.62.0-2ubuntu2.14+esm40.62.0-2ubuntu2.14+esm50.62.0-2ubuntu2.14+esm6
0.62.0-2ubuntu2.14+esm7
poppler
Ubuntu:Pro:20.04:LTS
From an advisory covering 2 CVEs
 before 0.86.1-0ubuntu1.7+esm1, plus listed versions
0.80.0-0ubuntu10.80.0-0ubuntu30.80.0-0ubuntu40.80.0-0ubuntu50.85.0-1ubuntu1
Show 9 moreShow less
0.85.0-1ubuntu30.86.1-0ubuntu10.86.1-0ubuntu1.10.86.1-0ubuntu1.20.86.1-0ubuntu1.30.86.1-0ubuntu1.40.86.1-0ubuntu1.50.86.1-0ubuntu1.60.86.1-0ubuntu1.7
0.86.1-0ubuntu1.7+esm1
poppler
openSUSE:Tumbleweed
 before 25.06.0-1.1
25.06.0-1.1

History

History
RecordedChangedSources
affected, facts
affected
first indexedCVE List, EUVD, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-52886 is a medium vulnerability (CVSS 5.5) in Freedesktop Poppler, published July 2, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.45%, the 38th percentile. Fixed in poppler 25.06.0-r0.

References

Show 22 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open