{"id":"CVE-2025-32364","aliases":["BELL-CVE-2025-32364","CLSA-2026-1776760883","DEBIAN-CVE-2025-32364","DLA-4141-1","EUVD-2025-9922","GHSA-69gq-2xc5-f33j","JLSEC-2026-85","MGASA-2025-0134","OESA-2025-1390","SUSE-SU-2025:01780-1","SUSE-SU-2025:1172-1","SUSE-SU-2025:1173-1","SUSE-SU-2025:1339-1","SUSE-SU-2025:1342-1","UBUNTU-CVE-2025-32364","USN-7426-1","USN-7426-2","openSUSE-SU-2025:14976-1"],"status":"published","title":"A floating-point exception in the PSStack::roll function of Poppler before 25.04.0 can cause an...","description":"A floating-point exception in the PSStack::roll function of Poppler before 25.04.0 can cause an application to crash when handling malformed inputs associated with INT_MIN.","severity":{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00271,"percentile":0.19457,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2025-04-05T00:00:00Z","modified":"2026-10-28T10:59:06Z","fixes":[{"ecosystem":"Alpaquita:stream","package":"poppler","fixed_in":["25.04.0-r0"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"poppler","fixed_in":["21.01.0-21.el9.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"poppler-cpp","fixed_in":["21.01.0-21.el9.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"poppler-cpp-devel","fixed_in":["21.01.0-21.el9.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"poppler-devel","fixed_in":["21.01.0-21.el9.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"poppler-glib","fixed_in":["21.01.0-21.el9.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"poppler-glib-devel","fixed_in":["21.01.0-21.el9.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"poppler-glib-doc","fixed_in":["21.01.0-21.el9.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"poppler-qt5","fixed_in":["21.01.0-21.el9.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"poppler-qt5-devel","fixed_in":["21.01.0-21.el9.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"poppler-utils","fixed_in":["21.01.0-21.el9.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"poppler","fixed_in":["22.12.0-2+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"poppler","fixed_in":["25.03.0-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"poppler","fixed_in":["25.03.0-3"],"sources":["osv"]},{"ecosystem":"Julia","package":"Poppler_jll","fixed_in":["25.10.0+0"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"poppler","fixed_in":["0.41.0-0ubuntu1.16+esm6"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"poppler","fixed_in":["0.62.0-2ubuntu2.14+esm5"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"poppler","fixed_in":["0.86.1-0ubuntu1.6"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"poppler","fixed_in":["22.02.0-2ubuntu0.7"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"poppler","fixed_in":["24.02.0-1ubuntu9.3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpaquita:stream","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"23.03.0-r1"},{"fixed":"25.04.0-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.01.0-21.el9.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"poppler-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.01.0-21.el9.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"poppler-cpp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.01.0-21.el9.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"poppler-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.01.0-21.el9.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"poppler-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.01.0-21.el9.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"poppler-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.01.0-21.el9.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"poppler-glib-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.01.0-21.el9.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"poppler-qt5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.01.0-21.el9.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"poppler-qt5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.01.0-21.el9.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"poppler-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.01.0-21.el9.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.12.0-2+deb12u1"}]}],"versions":["22.12.0-2"]},{"source":"osv","ecosystem":"Debian:13","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.03.0-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.03.0-3"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.09.0-3.1+deb11u2"}]}],"versions":["20.09.0-3.1","20.09.0-3.1+deb11u1"],"bundled":9},{"source":"osv","ecosystem":"Julia","package":"Poppler_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"25.10.0+0"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.02.0-1.5.mga9"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.90.0-11.oe2003sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.90.0-11.oe2203sp3"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.90.0-11.oe2203sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.12.0-6.oe2403sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.12.0-6.oe2403sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-16.55.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"poppler-qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-16.55.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.79.0-150200.3.38.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.03.0-150600.3.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.03.0-150600.3.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"poppler-qt5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.03.0-150600.3.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"poppler-qt6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.03.0-150600.3.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.03.0-150600.3.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"poppler-qt5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.03.0-150600.3.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"poppler-qt6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.03.0-150600.3.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.41.0-0ubuntu1.16+esm6"}]}],"versions":["0.33.0-0ubuntu3","0.37.0-0ubuntu1","0.38.0-0ubuntu1","0.41.0-0ubuntu1","0.41.0-0ubuntu1.1","0.41.0-0ubuntu1.2","0.41.0-0ubuntu1.3","0.41.0-0ubuntu1.4","0.41.0-0ubuntu1.5","0.41.0-0ubuntu1.6","0.41.0-0ubuntu1.7","0.41.0-0ubuntu1.8","0.41.0-0ubuntu1.9","0.41.0-0ubuntu1.10","0.41.0-0ubuntu1.11","0.41.0-0ubuntu1.12","0.41.0-0ubuntu1.13","0.41.0-0ubuntu1.14","0.41.0-0ubuntu1.15","0.41.0-0ubuntu1.16","0.41.0-0ubuntu1.16+esm1","0.41.0-0ubuntu1.16+esm2","0.41.0-0ubuntu1.16+esm3","0.41.0-0ubuntu1.16+esm4","0.41.0-0ubuntu1.16+esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.62.0-2ubuntu2.14+esm5"}]}],"versions":["0.57.0-2ubuntu4","0.57.0-2ubuntu5","0.62.0-1ubuntu1","0.62.0-2ubuntu1","0.62.0-2ubuntu2","0.62.0-2ubuntu2.1","0.62.0-2ubuntu2.2","0.62.0-2ubuntu2.4","0.62.0-2ubuntu2.5","0.62.0-2ubuntu2.6","0.62.0-2ubuntu2.7","0.62.0-2ubuntu2.8","0.62.0-2ubuntu2.9","0.62.0-2ubuntu2.10","0.62.0-2ubuntu2.11","0.62.0-2ubuntu2.12","0.62.0-2ubuntu2.13","0.62.0-2ubuntu2.14","0.62.0-2ubuntu2.14+esm1","0.62.0-2ubuntu2.14+esm2","0.62.0-2ubuntu2.14+esm3","0.62.0-2ubuntu2.14+esm4"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.86.1-0ubuntu1.6"}]}],"versions":["0.80.0-0ubuntu1","0.80.0-0ubuntu3","0.80.0-0ubuntu4","0.80.0-0ubuntu5","0.85.0-1ubuntu1","0.85.0-1ubuntu3","0.86.1-0ubuntu1","0.86.1-0ubuntu1.1","0.86.1-0ubuntu1.2","0.86.1-0ubuntu1.3","0.86.1-0ubuntu1.4","0.86.1-0ubuntu1.5"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.02.0-2ubuntu0.7"}]}],"versions":["21.06.1-1","21.11.0-1~ubuntu2","22.02.0-2","22.02.0-2ubuntu0.1","22.02.0-2ubuntu0.2","22.02.0-2ubuntu0.3","22.02.0-2ubuntu0.4","22.02.0-2ubuntu0.5","22.02.0-2ubuntu0.6"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.02.0-1ubuntu9.3"}]}],"versions":["23.08.0-2ubuntu1","23.12.0-1ubuntu2","24.02.0-1ubuntu2","24.02.0-1ubuntu8","24.02.0-1ubuntu9","24.02.0-1ubuntu9.1","24.02.0-1ubuntu9.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.86.1-0ubuntu1.6"}]}],"versions":["0.80.0-0ubuntu1","0.80.0-0ubuntu3","0.80.0-0ubuntu4","0.80.0-0ubuntu5","0.85.0-1ubuntu1","0.85.0-1ubuntu3","0.86.1-0ubuntu1","0.86.1-0ubuntu1.1","0.86.1-0ubuntu1.2","0.86.1-0ubuntu1.3","0.86.1-0ubuntu1.4","0.86.1-0ubuntu1.5"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.02.0-2ubuntu0.7"}]}],"versions":["21.06.1-1","21.11.0-1~ubuntu2","22.02.0-2","22.02.0-2ubuntu0.1","22.02.0-2ubuntu0.2","22.02.0-2ubuntu0.3","22.02.0-2ubuntu0.4","22.02.0-2ubuntu0.5","22.02.0-2ubuntu0.6"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.02.0-1ubuntu9.3"}]}],"versions":["23.08.0-2ubuntu1","23.12.0-1ubuntu2","24.02.0-1ubuntu2","24.02.0-1ubuntu8","24.02.0-1ubuntu9","24.02.0-1ubuntu9.1","24.02.0-1ubuntu9.2"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.41.0-0ubuntu1.16+esm6"}]}],"versions":["0.33.0-0ubuntu3","0.37.0-0ubuntu1","0.38.0-0ubuntu1","0.41.0-0ubuntu1","0.41.0-0ubuntu1.1","0.41.0-0ubuntu1.2","0.41.0-0ubuntu1.3","0.41.0-0ubuntu1.4","0.41.0-0ubuntu1.5","0.41.0-0ubuntu1.6","0.41.0-0ubuntu1.7","0.41.0-0ubuntu1.8","0.41.0-0ubuntu1.9","0.41.0-0ubuntu1.10","0.41.0-0ubuntu1.11","0.41.0-0ubuntu1.12","0.41.0-0ubuntu1.13","0.41.0-0ubuntu1.14","0.41.0-0ubuntu1.15","0.41.0-0ubuntu1.16","0.41.0-0ubuntu1.16+esm1","0.41.0-0ubuntu1.16+esm2","0.41.0-0ubuntu1.16+esm3","0.41.0-0ubuntu1.16+esm4","0.41.0-0ubuntu1.16+esm5"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.62.0-2ubuntu2.14+esm5"}]}],"versions":["0.57.0-2ubuntu4","0.57.0-2ubuntu5","0.62.0-1ubuntu1","0.62.0-2ubuntu1","0.62.0-2ubuntu2","0.62.0-2ubuntu2.1","0.62.0-2ubuntu2.2","0.62.0-2ubuntu2.4","0.62.0-2ubuntu2.5","0.62.0-2ubuntu2.6","0.62.0-2ubuntu2.7","0.62.0-2ubuntu2.8","0.62.0-2ubuntu2.9","0.62.0-2ubuntu2.10","0.62.0-2ubuntu2.11","0.62.0-2ubuntu2.12","0.62.0-2ubuntu2.13","0.62.0-2ubuntu2.14","0.62.0-2ubuntu2.14+esm1","0.62.0-2ubuntu2.14+esm2","0.62.0-2ubuntu2.14+esm3","0.62.0-2ubuntu2.14+esm4"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.04.0-1.1"}]}],"bundled":2}],"products":[{"vendor":"freedesktop","product":"poppler"},{"vendor":"poppler","product":"poppler"}],"references":[{"url":"https://gitlab.freedesktop.org/poppler/poppler/-/issues/1574","tags":["Exploit","Issue Tracking","report","web"]},{"url":"https://gitlab.freedesktop.org/poppler/poppler/-/commit/d87bc726c7cc98f8c26b60ece5f20236e9de1bc3","tags":["Patch","fix","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/04/msg00037.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32364","tags":["advisory","web"]},{"url":"https://github.com/advisories/GHSA-69gq-2xc5-f33j","tags":["web"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2025-32364","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1776760883.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/32xxx/CVE-2025-32364.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-32364","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0134.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34182","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7426-1","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/7MHRTVNCUQHLCEUDCYX24NK4ID3BMFG5/","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1390","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32365","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501780-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1240880","tags":["report"]},{"url":"https://bugzilla.suse.com/1240881","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-32364","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-32365","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251172-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251173-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251339-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251342-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1239939","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-32364","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-32364","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-32365","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7426-2","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ULCQ4B6UIFAO47KDNU5W3OK2BBKAPINE/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-32364","description":"A floating-point exception in the PSStack::roll function of Poppler before 25.04.0 can cause an application to crash when handling malformed inputs associated with INT_MIN.","status":"published","published":"2025-04-05T00:00:00Z","modified":"2025-11-03T19:53:22.42Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:32:46.109993Z"}],"euvd":[{"id":"EUVD-2025-9922","description":"A floating-point exception in the PSStack::roll function of Poppler before 25.04.0 can cause an application to crash when handling malformed inputs associated with INT_MIN.","status":"published","published":"2025-04-05T00:00:00Z","modified":"2025-11-03T19:53:22Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T19:49:33.269212Z"}],"ghsa":[{"id":"GHSA-69gq-2xc5-f33j","title":"A floating-point exception in the PSStack::roll function of Poppler before 25.04.0 can cause an...","description":"A floating-point exception in the PSStack::roll function of Poppler before 25.04.0 can cause an application to crash when handling malformed inputs associated with INT_MIN.","status":"published","published":"2025-04-07T15:31:11Z","modified":"2025-11-03T21:34:34Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T15:04:24.938946Z"}],"nvd":[{"id":"CVE-2025-32364","description":"A floating-point exception in the PSStack::roll function of Poppler before 25.04.0 can cause an application to crash when handling malformed inputs associated with INT_MIN.","status":"published","published":"2025-04-05T22:15:18.337Z","modified":"2026-06-17T09:11:52.82Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:10:59.48027Z"}],"osv":[{"id":"BELL-CVE-2025-32364","status":"published","published":"2025-04-08T05:58:00.97181Z","modified":"2026-01-26T09:39:07.380906Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:21.741325Z"},{"id":"CVE-2025-32364","description":"A floating-point exception in the PSStack::roll function of Poppler before 25.04.0 can cause an application to crash when handling malformed inputs associated with INT_MIN.","status":"published","published":"2025-04-05T00:00:00Z","modified":"2026-10-28T10:59:06.903776996Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T15:44:48.02508Z"},{"id":"DEBIAN-CVE-2025-32364","description":"A floating-point exception in the PSStack::roll function of Poppler before 25.04.0 can cause an application to crash when handling malformed inputs associated with INT_MIN.","status":"published","published":"2025-04-05T22:15:18.337Z","modified":"2026-09-01T20:05:45.847963966Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:45.870237Z"},{"id":"JLSEC-2026-85","title":"A floating-point exception in the PSStack::roll function of Poppler before 25.04.0 can cause an...","description":"A floating-point exception in the PSStack::roll function of Poppler before 25.04.0 can cause an application to crash when handling malformed inputs associated with `INT_MIN`.","status":"published","published":"2026-04-13T13:20:05.063Z","modified":"2026-07-25T18:24:54.307012215Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:47:19.003546Z"},{"id":"OESA-2025-1390","title":"poppler security update","description":"is a PDF rendering library.\r\n\r\nSecurity Fix(es):\n\nA floating-point exception in the PSStack::roll function of Poppler before 25.04.0 can cause an application to crash when handling malformed inputs associated with INT_MIN.(CVE-2025-32364)\n\nPoppler before 25.04.0 allows crafted input files to trigger out-of-bounds reads in the JBIG2Bitmap::combine function in JBIG2Stream.cc because of a misplaced isOk check.(CVE-2025-32365)","status":"published","published":"2025-04-11T11:08:29Z","modified":"2026-08-18T01:18:45.790649842Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"UBUNTU-CVE-2025-32364","description":"A floating-point exception in the PSStack::roll function of Poppler before 25.04.0 can cause an application to crash when handling malformed inputs associated with INT_MIN.","status":"published","published":"2025-04-07T00:00:00Z","modified":"2026-04-22T15:41:40.159069Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:55:28.829873Z"},{"id":"CLSA-2026-1776760883","title":"poppler: Fix of CVE-2025-32364","description":"- CVE-2025-32364: fix floating-point exception in PSStack::roll when handling\n  malformed PostScript input with INT_MIN","status":"published","published":"2026-04-21T08:41:27Z","modified":"2026-06-01T00:32:47.512320669Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"DLA-4141-1","title":"poppler - security update","status":"published","published":"2025-04-28T00:00:00Z","modified":"2026-03-09T01:18:13.180725Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"MGASA-2025-0134","title":"Updated poppler packages fix security vulnerabilities","description":"A floating-point exception in the PSStack::roll function of Poppler\nbefore 25.04.0 can cause an application to crash when handling malformed\ninputs associated with INT_MIN. (CVE-2025-32364)\nPoppler before 25.04.0 allows crafted input files to trigger\nout-of-bounds reads in the JBIG2Bitmap::combine function in\nJBIG2Stream.cc because of a misplaced isOk check. (CVE-2025-32365)\n","status":"published","published":"2025-04-12T04:23:49Z","modified":"2026-04-16T04:42:22.251204617Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2025:14976-1","title":"libpoppler-cpp2-25.04.0-1.1 on GA media","description":"These are all security issues fixed in the libpoppler-cpp2-25.04.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-04-08T00:00:00Z","modified":"2026-02-04T02:33:40.099937Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"SUSE-SU-2025:01780-1","title":"Security update for poppler","description":"This update for poppler fixes the following issues:\n\n- CVE-2025-32364: integer overflow due to INT_MIN negation in the PSStack::roll function of Function.cc leads to\n  floating point exception crash in pdftotext (bsc#1240880).\n- CVE-2025-32365: misplaced isOk check in the JBIG2Bitmap::combine function of JBIG2Stream.cc leads to out-of-bounds\n  read (bsc#1240881).\n","status":"published","published":"2025-05-30T13:43:45Z","modified":"2026-02-04T03:13:57.342669Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:1172-1","title":"Security update for poppler","description":"This update for poppler fixes the following issues:\n\n- CVE-2025-32364: Fixed a floating point exception. (bsc#1240880)\n- CVE-2025-32365: Fixed the isOk check in JBIG2Bitmap::combine function in JBIG2Stream.cc. (bsc#1240881)\n","status":"published","published":"2025-04-08T13:36:19Z","modified":"2025-04-09T12:00:22.484578Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:1173-1","title":"Security update for poppler","description":"This update for poppler fixes the following issues:\n\n- CVE-2025-32364: Fixed a floating point exception. (bsc#1240880)\n- CVE-2025-32365: Fixed the isOk check in JBIG2Bitmap::combine function in JBIG2Stream.cc. (bsc#1240881)\n","status":"published","published":"2025-04-08T13:36:33Z","modified":"2026-02-04T04:26:24.055077Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:1339-1","title":"Security update for poppler","description":"This update for poppler fixes the following issues:\n\n- CVE-2025-32364: Fixed a floating point exception. (bsc#1240880)\n- CVE-2025-32365: Fixed the isOk check in JBIG2Bitmap::combine function in JBIG2Stream.cc. (bsc#1240881)\n","status":"published","published":"2025-04-17T11:02:47Z","modified":"2026-02-04T03:34:35.163037Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:1342-1","title":"Security update for poppler","description":"This update for poppler fixes the following issues:\n\n- CVE-2025-32364: Fixed a floating point exception. (bsc#1240880)\n- CVE-2025-32365: Fixed the isOk check in JBIG2Bitmap::combine function in JBIG2Stream.cc. (bsc#1240881)\n- Adding -fpie compile flag to GCC for Position Independent Executable (PIE) support (bsc#1239939).\n","status":"published","published":"2025-04-17T14:01:36Z","modified":"2025-04-19T12:45:15.747015Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"USN-7426-1","title":"poppler vulnerabilities","description":"It was discovered that poppler incorrectly handled memory when opening\ncertain PDF files. An attacker could possibly use this issue to cause\npoppler to crash, resulting in a denial of service.\n","status":"published","published":"2025-04-08T17:26:51Z","modified":"2026-04-22T10:56:59.619377Z","updated_at":"2026-11-02T16:58:19.988474Z"},{"id":"USN-7426-2","title":"poppler vulnerabilities","description":"USN-7426-1 fixed several vulnerabilities in poppler. This update provides\nthe corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.\n\nOriginal advisory details:\n\n It was discovered that poppler incorrectly handled memory when opening\n certain PDF files. An attacker could possibly use this issue to cause\n poppler to crash, resulting in a denial of service.\n","status":"published","published":"2025-04-09T21:39:41Z","modified":"2026-06-25T13:32:30.353408602Z","updated_at":"2026-11-02T16:58:19.988474Z"}]}}