{"id":"CVE-2025-50420","aliases":["CLSA-2026-1783441581","CLSA-2026-1783671750","CLSA-2026-1786352279","DEBIAN-CVE-2025-50420","EUVD-2025-23522","GHSA-ppc9-vw33-pg6g","JLSEC-2026-88","OESA-2025-2033","OESA-2025-2034","OESA-2025-2035","OESA-2025-2036","OESA-2025-2037","OESA-2025-2074","ROOT-OS-DEBIAN-12-CVE-2025-50420","SUSE-SU-2025:02788-1","SUSE-SU-2025:02789-1","SUSE-SU-2025:02790-1","SUSE-SU-2025:02791-1","UBUNTU-CVE-2025-50420","USN-7708-1","openSUSE-SU-2025:15416-1"],"status":"published","title":"An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an...","description":"An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-12","score":0.00374,"percentile":0.31782,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-400","CWE-674"],"published":"2025-08-04T00:00:00Z","modified":"2026-10-28T02:30:51Z","exploits":[{"source":"pocgithub","id":"Landw-hub/CVE-2025-50420","title":"Landw-hub/CVE-2025-50420","date":"2025-08-01","url":"https://github.com/Landw-hub/CVE-2025-50420"}],"fixes":[{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"poppler","fixed_in":["21.01.0-14.el9_2.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"poppler-cpp","fixed_in":["21.01.0-14.el9_2.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"poppler-cpp-devel","fixed_in":["21.01.0-14.el9_2.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"poppler-devel","fixed_in":["21.01.0-14.el9_2.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"poppler-glib","fixed_in":["21.01.0-14.el9_2.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"poppler-glib-devel","fixed_in":["21.01.0-14.el9_2.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"poppler-glib-doc","fixed_in":["21.01.0-14.el9_2.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"poppler-qt5","fixed_in":["21.01.0-14.el9_2.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"poppler-qt5-devel","fixed_in":["21.01.0-14.el9_2.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"poppler-utils","fixed_in":["21.01.0-14.el9_2.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"poppler","fixed_in":["21.01.0-21.el9.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"poppler-cpp","fixed_in":["21.01.0-21.el9.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"poppler-cpp-devel","fixed_in":["21.01.0-21.el9.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"poppler-devel","fixed_in":["21.01.0-21.el9.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"poppler-glib","fixed_in":["21.01.0-21.el9.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"poppler-glib-devel","fixed_in":["21.01.0-21.el9.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"poppler-glib-doc","fixed_in":["21.01.0-21.el9.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"poppler-qt5","fixed_in":["21.01.0-21.el9.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"poppler-qt5-devel","fixed_in":["21.01.0-21.el9.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"poppler-utils","fixed_in":["21.01.0-21.el9.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"poppler","fixed_in":["0.26.5-43.el7.1.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"poppler-cpp","fixed_in":["0.26.5-43.el7.1.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"poppler-cpp-devel","fixed_in":["0.26.5-43.el7.1.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"poppler-demos","fixed_in":["0.26.5-43.el7.1.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"poppler-devel","fixed_in":["0.26.5-43.el7.1.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"poppler-glib","fixed_in":["0.26.5-43.el7.1.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"poppler-glib-devel","fixed_in":["0.26.5-43.el7.1.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"poppler-qt","fixed_in":["0.26.5-43.el7.1.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"poppler-qt-devel","fixed_in":["0.26.5-43.el7.1.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"poppler-utils","fixed_in":["0.26.5-43.el7.1.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"poppler","fixed_in":["22.12.0-2+deb12u3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"poppler","fixed_in":["25.03.0-5+deb13u2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"poppler","fixed_in":["25.03.0-6"],"sources":["osv"]},{"ecosystem":"Julia","package":"Poppler_jll","fixed_in":["25.10.0+0"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"poppler","fixed_in":["0.90.0-13.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"poppler","fixed_in":["23.12.0-10.oe2403"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"poppler","fixed_in":["23.12.0-10.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP2","package":"poppler","fixed_in":["23.12.0-10.oe2403sp2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"poppler","fixed_in":["0.90.0-13.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"poppler","fixed_in":["0.90.0-13.oe2003sp4"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"poppler","fixed_in":["0.43.0-16.64.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"poppler-qt","fixed_in":["0.43.0-16.64.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"poppler","fixed_in":["0.43.0-16.64.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"poppler-qt","fixed_in":["0.43.0-16.64.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"poppler","fixed_in":["23.01.0-150500.3.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"poppler","fixed_in":["23.01.0-150500.3.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"poppler","fixed_in":["23.01.0-150500.3.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"poppler","fixed_in":["23.01.0-150500.3.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"poppler","fixed_in":["22.01.0-150400.3.38.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"poppler","fixed_in":["22.01.0-150400.3.38.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"poppler","fixed_in":["22.01.0-150400.3.38.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"poppler","fixed_in":["22.01.0-150400.3.38.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy LTS 4.3","package":"poppler","fixed_in":["22.01.0-150400.3.38.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server LTS 4.3","package":"poppler","fixed_in":["22.01.0-150400.3.38.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"poppler","fixed_in":["24.03.0-150600.3.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"poppler","fixed_in":["24.03.0-150600.3.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"poppler","fixed_in":["24.03.0-150600.3.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"poppler-qt5","fixed_in":["24.03.0-150600.3.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"poppler-qt6","fixed_in":["24.03.0-150600.3.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"poppler","fixed_in":["24.03.0-150600.3.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"poppler-qt5","fixed_in":["24.03.0-150600.3.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"poppler-qt6","fixed_in":["24.03.0-150600.3.19.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"poppler","fixed_in":["24.03.0-150600.3.19.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"poppler-qt5","fixed_in":["24.03.0-150600.3.19.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"poppler-qt6","fixed_in":["24.03.0-150600.3.19.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"poppler","fixed_in":["0.41.0-0ubuntu1.16+esm8"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"poppler","fixed_in":["0.62.0-2ubuntu2.14+esm8"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"poppler","fixed_in":["0.86.1-0ubuntu1.7+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"poppler","fixed_in":["22.02.0-2ubuntu0.10"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"poppler","fixed_in":["24.02.0-1ubuntu9.6"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"poppler","fixed_in":["25.08.0-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.01.0-14.el9_2.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"poppler-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.01.0-14.el9_2.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"poppler-cpp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.01.0-14.el9_2.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"poppler-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.01.0-14.el9_2.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"poppler-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.01.0-14.el9_2.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"poppler-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.01.0-14.el9_2.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"poppler-glib-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.01.0-14.el9_2.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"poppler-qt5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.01.0-14.el9_2.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"poppler-qt5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.01.0-14.el9_2.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"poppler-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.01.0-14.el9_2.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.01.0-21.el9.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"poppler-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.01.0-21.el9.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"poppler-cpp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.01.0-21.el9.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"poppler-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.01.0-21.el9.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"poppler-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.01.0-21.el9.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"poppler-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.01.0-21.el9.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"poppler-glib-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.01.0-21.el9.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"poppler-qt5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.01.0-21.el9.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"poppler-qt5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.01.0-21.el9.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"poppler-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.01.0-21.el9.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.5-43.el7.1.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"poppler-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.5-43.el7.1.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"poppler-cpp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.5-43.el7.1.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"poppler-demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.5-43.el7.1.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"poppler-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.5-43.el7.1.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"poppler-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.5-43.el7.1.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"poppler-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.5-43.el7.1.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"poppler-qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.5-43.el7.1.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"poppler-qt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.5-43.el7.1.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"poppler-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.5-43.el7.1.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.12.0-2+deb12u3"}]}],"versions":["22.12.0-2","22.12.0-2+deb12u1","22.12.0-2+deb12u2"]},{"source":"osv","ecosystem":"Debian:13","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.03.0-5+deb13u2"}]}],"versions":["25.03.0-5"]},{"source":"osv","ecosystem":"Debian:14","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.03.0-6"}]}],"versions":["25.03.0-5"]},{"source":"osv","ecosystem":"Julia","package":"Poppler_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"25.10.0+0"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.90.0-13.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.12.0-10.oe2403"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.12.0-10.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.12.0-10.oe2403sp2"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.90.0-13.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.90.0-13.oe2003sp4"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-16.64.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"poppler-qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-16.64.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-16.64.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"poppler-qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-16.64.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.01.0-150500.3.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.01.0-150500.3.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.01.0-150500.3.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.01.0-150500.3.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.01.0-150400.3.38.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.01.0-150400.3.38.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.01.0-150400.3.38.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.01.0-150400.3.38.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy LTS 4.3","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.01.0-150400.3.38.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server LTS 4.3","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.01.0-150400.3.38.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.03.0-150600.3.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.03.0-150600.3.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.03.0-150600.3.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"poppler-qt5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.03.0-150600.3.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"poppler-qt6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.03.0-150600.3.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.03.0-150600.3.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"poppler-qt5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.03.0-150600.3.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"poppler-qt6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.03.0-150600.3.19.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.03.0-150600.3.19.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"poppler-qt5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.03.0-150600.3.19.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"poppler-qt6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.03.0-150600.3.19.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.41.0-0ubuntu1.16+esm8"}]}],"versions":["0.33.0-0ubuntu3","0.37.0-0ubuntu1","0.38.0-0ubuntu1","0.41.0-0ubuntu1","0.41.0-0ubuntu1.1","0.41.0-0ubuntu1.2","0.41.0-0ubuntu1.3","0.41.0-0ubuntu1.4","0.41.0-0ubuntu1.5","0.41.0-0ubuntu1.6","0.41.0-0ubuntu1.7","0.41.0-0ubuntu1.8","0.41.0-0ubuntu1.9","0.41.0-0ubuntu1.10","0.41.0-0ubuntu1.11","0.41.0-0ubuntu1.12","0.41.0-0ubuntu1.13","0.41.0-0ubuntu1.14","0.41.0-0ubuntu1.15","0.41.0-0ubuntu1.16","0.41.0-0ubuntu1.16+esm1","0.41.0-0ubuntu1.16+esm2","0.41.0-0ubuntu1.16+esm3","0.41.0-0ubuntu1.16+esm4","0.41.0-0ubuntu1.16+esm5","0.41.0-0ubuntu1.16+esm6","0.41.0-0ubuntu1.16+esm7"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.62.0-2ubuntu2.14+esm8"}]}],"versions":["0.57.0-2ubuntu4","0.57.0-2ubuntu5","0.62.0-1ubuntu1","0.62.0-2ubuntu1","0.62.0-2ubuntu2","0.62.0-2ubuntu2.1","0.62.0-2ubuntu2.2","0.62.0-2ubuntu2.4","0.62.0-2ubuntu2.5","0.62.0-2ubuntu2.6","0.62.0-2ubuntu2.7","0.62.0-2ubuntu2.8","0.62.0-2ubuntu2.9","0.62.0-2ubuntu2.10","0.62.0-2ubuntu2.11","0.62.0-2ubuntu2.12","0.62.0-2ubuntu2.13","0.62.0-2ubuntu2.14","0.62.0-2ubuntu2.14+esm1","0.62.0-2ubuntu2.14+esm2","0.62.0-2ubuntu2.14+esm3","0.62.0-2ubuntu2.14+esm4","0.62.0-2ubuntu2.14+esm5","0.62.0-2ubuntu2.14+esm6","0.62.0-2ubuntu2.14+esm7"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.86.1-0ubuntu1.7+esm2"}]}],"versions":["0.80.0-0ubuntu1","0.80.0-0ubuntu3","0.80.0-0ubuntu4","0.80.0-0ubuntu5","0.85.0-1ubuntu1","0.85.0-1ubuntu3","0.86.1-0ubuntu1","0.86.1-0ubuntu1.1","0.86.1-0ubuntu1.2","0.86.1-0ubuntu1.3","0.86.1-0ubuntu1.4","0.86.1-0ubuntu1.5","0.86.1-0ubuntu1.6","0.86.1-0ubuntu1.7","0.86.1-0ubuntu1.7+esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.02.0-2ubuntu0.10"}]}],"versions":["21.06.1-1","21.11.0-1~ubuntu2","22.02.0-2","22.02.0-2ubuntu0.1","22.02.0-2ubuntu0.2","22.02.0-2ubuntu0.3","22.02.0-2ubuntu0.4","22.02.0-2ubuntu0.5","22.02.0-2ubuntu0.6","22.02.0-2ubuntu0.7","22.02.0-2ubuntu0.8","22.02.0-2ubuntu0.9"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.02.0-1ubuntu9.6"}]}],"versions":["23.08.0-2ubuntu1","23.12.0-1ubuntu2","24.02.0-1ubuntu2","24.02.0-1ubuntu8","24.02.0-1ubuntu9","24.02.0-1ubuntu9.1","24.02.0-1ubuntu9.2","24.02.0-1ubuntu9.3","24.02.0-1ubuntu9.4","24.02.0-1ubuntu9.5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.41.0-0ubuntu1.16+esm8"}]}],"versions":["0.33.0-0ubuntu3","0.37.0-0ubuntu1","0.38.0-0ubuntu1","0.41.0-0ubuntu1","0.41.0-0ubuntu1.1","0.41.0-0ubuntu1.2","0.41.0-0ubuntu1.3","0.41.0-0ubuntu1.4","0.41.0-0ubuntu1.5","0.41.0-0ubuntu1.6","0.41.0-0ubuntu1.7","0.41.0-0ubuntu1.8","0.41.0-0ubuntu1.9","0.41.0-0ubuntu1.10","0.41.0-0ubuntu1.11","0.41.0-0ubuntu1.12","0.41.0-0ubuntu1.13","0.41.0-0ubuntu1.14","0.41.0-0ubuntu1.15","0.41.0-0ubuntu1.16","0.41.0-0ubuntu1.16+esm1","0.41.0-0ubuntu1.16+esm2","0.41.0-0ubuntu1.16+esm3","0.41.0-0ubuntu1.16+esm4","0.41.0-0ubuntu1.16+esm5","0.41.0-0ubuntu1.16+esm6","0.41.0-0ubuntu1.16+esm7"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.62.0-2ubuntu2.14+esm8"}]}],"versions":["0.57.0-2ubuntu4","0.57.0-2ubuntu5","0.62.0-1ubuntu1","0.62.0-2ubuntu1","0.62.0-2ubuntu2","0.62.0-2ubuntu2.1","0.62.0-2ubuntu2.2","0.62.0-2ubuntu2.4","0.62.0-2ubuntu2.5","0.62.0-2ubuntu2.6","0.62.0-2ubuntu2.7","0.62.0-2ubuntu2.8","0.62.0-2ubuntu2.9","0.62.0-2ubuntu2.10","0.62.0-2ubuntu2.11","0.62.0-2ubuntu2.12","0.62.0-2ubuntu2.13","0.62.0-2ubuntu2.14","0.62.0-2ubuntu2.14+esm1","0.62.0-2ubuntu2.14+esm2","0.62.0-2ubuntu2.14+esm3","0.62.0-2ubuntu2.14+esm4","0.62.0-2ubuntu2.14+esm5","0.62.0-2ubuntu2.14+esm6","0.62.0-2ubuntu2.14+esm7"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.86.1-0ubuntu1.7+esm2"}]}],"versions":["0.80.0-0ubuntu1","0.80.0-0ubuntu3","0.80.0-0ubuntu4","0.80.0-0ubuntu5","0.85.0-1ubuntu1","0.85.0-1ubuntu3","0.86.1-0ubuntu1","0.86.1-0ubuntu1.1","0.86.1-0ubuntu1.2","0.86.1-0ubuntu1.3","0.86.1-0ubuntu1.4","0.86.1-0ubuntu1.5","0.86.1-0ubuntu1.6","0.86.1-0ubuntu1.7","0.86.1-0ubuntu1.7+esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.02.0-2ubuntu0.10"}]}],"versions":["21.06.1-1","21.11.0-1~ubuntu2","22.02.0-2","22.02.0-2ubuntu0.1","22.02.0-2ubuntu0.2","22.02.0-2ubuntu0.3","22.02.0-2ubuntu0.4","22.02.0-2ubuntu0.5","22.02.0-2ubuntu0.6","22.02.0-2ubuntu0.7","22.02.0-2ubuntu0.8","22.02.0-2ubuntu0.9"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.02.0-1ubuntu9.6"}]}],"versions":["23.08.0-2ubuntu1","23.12.0-1ubuntu2","24.02.0-1ubuntu2","24.02.0-1ubuntu8","24.02.0-1ubuntu9","24.02.0-1ubuntu9.1","24.02.0-1ubuntu9.2","24.02.0-1ubuntu9.3","24.02.0-1ubuntu9.4","24.02.0-1ubuntu9.5"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.08.0-1.1"}]}]}],"products":[{"vendor":"freedesktop","product":"poppler"}],"references":[{"url":"https://github.com/Landw-hub/CVE-2025-50420","tags":["Exploit","Third Party Advisory","package","web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-50420","tags":["advisory"]},{"url":"http://freedesktop.com","tags":["web"]},{"url":"http://poppler.com","tags":["web"]},{"url":"https://github.com/advisories/GHSA-ppc9-vw33-pg6g"},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1783441581.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1783671750.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1786352279.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-38171","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/50xxx/CVE-2025-50420.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-50420","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2033","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2034","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2035","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2036","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2037","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2074","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502788-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1247590","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-50420","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502789-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502790-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502791-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-50420","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-50420","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7708-1","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-50420","description":"An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).","status":"published","published":"2025-08-04T00:00:00Z","modified":"2026-07-05T16:07:46.288Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"adp"}],"cwes":["CWE-674"],"updated_at":"2026-11-02T14:32:52.526476Z"}],"euvd":[{"id":"EUVD-2025-23522","description":"An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).","status":"published","published":"2025-08-04T00:00:00Z","modified":"2026-07-05T16:07:46Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T18:20:13.899968Z"}],"ghsa":[{"id":"GHSA-ppc9-vw33-pg6g","title":"An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an...","description":"An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).","status":"published","published":"2025-08-04T18:30:37Z","modified":"2025-08-05T18:31:50Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400","CWE-674"],"updated_at":"2026-11-02T15:03:11.278533Z"}],"nvd":[{"id":"CVE-2025-50420","description":"An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).","status":"published","published":"2025-08-04T17:15:30.7Z","modified":"2026-07-05T16:19:29.643Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-674"],"updated_at":"2026-11-02T14:11:21.71471Z"}],"osv":[{"id":"CVE-2025-50420","description":"An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).","status":"published","published":"2025-08-04T00:00:00Z","modified":"2026-10-28T02:30:51.714274869Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:50.037003Z"},{"id":"DEBIAN-CVE-2025-50420","description":"An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).","status":"published","published":"2025-08-04T17:15:30.7Z","modified":"2026-09-01T20:05:53.517190158Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:47.378563Z"},{"id":"JLSEC-2026-88","description":"An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).","status":"published","published":"2026-04-13T13:20:05.063Z","modified":"2026-07-18T00:02:24.119297201Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:47:19.003546Z"},{"id":"OESA-2025-2033","title":"poppler security update","description":" is a PDF rendering library.\r\n\r\nSecurity Fix(es):\n\nAn issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).(CVE-2025-50420)","status":"published","published":"2025-08-15T11:09:07Z","modified":"2026-08-18T01:18:02.897960936Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-2034","title":"poppler security update","description":" is a PDF rendering library.\r\n\r\nSecurity Fix(es):\n\nAn issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).(CVE-2025-50420)","status":"published","published":"2025-08-15T11:09:07Z","modified":"2026-08-18T01:18:02.916287441Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-2035","title":"poppler security update","description":" is a PDF rendering library.\r\n\r\nSecurity Fix(es):\n\nAn issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).(CVE-2025-50420)","status":"published","published":"2025-08-15T11:09:07Z","modified":"2026-08-18T01:18:02.944294022Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-2036","title":"poppler security update","description":" is a PDF rendering library.\r\n\r\nSecurity Fix(es):\n\nAn issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).(CVE-2025-50420)","status":"published","published":"2025-08-15T11:09:07Z","modified":"2026-08-18T01:18:02.931062195Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-2037","title":"poppler security update","description":" is a PDF rendering library.\r\n\r\nSecurity Fix(es):\n\nAn issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).(CVE-2025-50420)","status":"published","published":"2025-08-15T11:09:07Z","modified":"2026-08-18T01:18:02.999255484Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-2074","title":"poppler security update","description":" is a PDF rendering library.\r\n\r\nSecurity Fix(es):\n\nA vulnerability classified as problematic has been found in Freedesktop Poppler 25.04.0 (Document Reader Software).CWE is classifying the issue as CWE-674. The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.This is going to have an impact on availability.There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.(CVE-2025-50420)","status":"published","published":"2025-08-22T11:09:09Z","modified":"2026-08-18T01:18:58.131093336Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"UBUNTU-CVE-2025-50420","description":"An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).","status":"published","published":"2025-08-04T17:15:00Z","modified":"2026-04-22T16:05:07.080819Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:55:50.31802Z"},{"id":"CLSA-2026-1783441581","title":"poppler: Fix of CVE-2025-50420","description":"- CVE-2025-50420: fix crash in pdfseparate by skipping annotation entries\n  missing both Type and SubType (PDFDoc::markAnnotations)","status":"published","published":"2026-07-07T16:26:37Z","modified":"2026-10-26T09:30:02.909340583Z","updated_at":"2026-11-02T15:43:46.151924Z"},{"id":"CLSA-2026-1783671750","title":"poppler: Fix of CVE-2025-50420","description":"- CVE-2025-50420: skip self-referential /Annots entries in PDFDoc::markAnnotations\n  to prevent infinite recursion (denial of service) in pdfseparate","status":"published","published":"2026-07-10T08:22:45Z","modified":"2026-10-26T09:31:14.889566578Z","updated_at":"2026-11-02T15:43:46.151924Z"},{"id":"CLSA-2026-1786352279","title":"poppler: Fix of 2 CVEs","description":"- CVE-2025-50420: fix infinite recursion (uncontrolled recursion, CWE-674) in pdfseparate via crafted /Annots dictionaries in PDFDoc::markAnnotations, leading to denial of service","status":"published","published":"2026-10-20T15:44:15Z","modified":"2026-10-26T09:31:42.50227387Z","updated_at":"2026-11-02T15:43:46.850893Z"},{"id":"openSUSE-SU-2025:15416-1","title":"libpoppler-cpp2-25.08.0-1.1 on GA media","description":"These are all security issues fixed in the libpoppler-cpp2-25.08.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-08-06T00:00:00Z","modified":"2026-03-23T04:53:44.642448Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2025-50420","title":"CVE-2025-50420 in poppler - Patched by Root","description":"Root has patched CVE-2025-50420 in the poppler package for Root:Debian:12. Multiple fixed versions available.","status":"withdrawn","published":"2026-08-25T14:27:15Z","modified":"2026-10-08T13:00:07.237160111Z","updated_at":"2026-11-02T15:53:31.514195Z"},{"id":"SUSE-SU-2025:02788-1","title":"Security update for poppler","description":"This update for poppler fixes the following issues:\n\n- CVE-2025-50420: Fixed Denial of Service in pdfseparate utility (bsc#1247590)\n","status":"published","published":"2025-08-13T12:52:10Z","modified":"2026-03-23T04:46:47.537077Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:02789-1","title":"Security update for poppler","description":"This update for poppler fixes the following issues:\n\n- CVE-2025-50420: Fixed Denial of Service in pdfseparate utility (bsc#1247590)\n","status":"published","published":"2025-08-13T12:52:45Z","modified":"2026-03-23T04:47:51.150013Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:02790-1","title":"Security update for poppler","description":"This update for poppler fixes the following issues:\n\n- CVE-2025-50420: Fixed Denial of Service in pdfseparate utility (bsc#1247590)\n","status":"published","published":"2025-08-13T12:53:34Z","modified":"2026-03-23T04:46:47.972695Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:02791-1","title":"Security update for poppler","description":"This update for poppler fixes the following issues:\n\n- CVE-2025-50420: Fixed Denial of Service in pdfseparate utility (bsc#1247590)\n","status":"published","published":"2025-08-13T12:53:59Z","modified":"2026-03-23T04:47:51.071103Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"USN-7708-1","title":"poppler vulnerability","description":"It was discovered that poppler incorrectly handled certain PDF files.\nAn attacker could possibly use this issue to cause a denial of service.\n","status":"published","published":"2025-08-20T15:35:30Z","modified":"2026-06-25T13:32:30.727167083Z","updated_at":"2026-11-02T16:58:21.91885Z"}]}}