CVE-2025-50420
Fixed in a distro release EPSS <1%CVSS 6.5
An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).
Products: freedesktop poppler
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | poppler | 22.12.0-2+deb12u3 |
| Debian 13 | poppler | 25.03.0-5+deb13u2 |
| Debian 14 | poppler | 25.03.0-6 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | poppler | 22.01.0-150400.3.38.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | poppler | 22.01.0-150400.3.38.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | poppler | 23.01.0-150500.3.23.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | poppler | 23.01.0-150500.3.23.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP6 | poppler | 24.03.0-150600.3.19.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP7 | poppler | 24.03.0-150600.3.19.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP6 | poppler | 24.03.0-150600.3.19.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP6 | poppler-qt5 | 24.03.0-150600.3.19.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP6 | poppler-qt6 | 24.03.0-150600.3.19.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP7 | poppler | 24.03.0-150600.3.19.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP7 | poppler-qt5 | 24.03.0-150600.3.19.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP7 | poppler-qt6 | 24.03.0-150600.3.19.1 |
| SUSE Linux Enterprise Server 12 SP5-LTSS | poppler | 0.43.0-16.64.1 |
| SUSE Linux Enterprise Server 12 SP5-LTSS | poppler-qt | 0.43.0-16.64.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | poppler | 22.01.0-150400.3.38.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | poppler | 23.01.0-150500.3.23.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | poppler | 0.43.0-16.64.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | poppler-qt | 0.43.0-16.64.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | poppler | 22.01.0-150400.3.38.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | poppler | 23.01.0-150500.3.23.1 |
| SUSE Manager Proxy LTS 4.3 | poppler | 22.01.0-150400.3.38.1 |
| SUSE Manager Server LTS 4.3 | poppler | 22.01.0-150400.3.38.1 |
| Ubuntu 22.04 LTS | poppler | 22.02.0-2ubuntu0.10 |
| Ubuntu 24.04 LTS | poppler | 24.02.0-1ubuntu9.6 |
| Ubuntu Pro 16.04 LTS | poppler | 0.41.0-0ubuntu1.16+esm8 |
| Ubuntu Pro 18.04 LTS | poppler | 0.62.0-2ubuntu2.14+esm8 |
| Ubuntu Pro 20.04 LTS | poppler | 0.86.1-0ubuntu1.7+esm2 |
| openSUSE Leap 15.6 | poppler | 24.03.0-150600.3.19.1 |
| openSUSE Leap 15.6 | poppler-qt5 | 24.03.0-150600.3.19.1 |
| openSUSE Leap 15.6 | poppler-qt6 | 24.03.0-150600.3.19.1 |
| openSUSE Tumbleweed | poppler | 25.08.0-1.1 |