DeutschShown in its original language — a full translation is planned for a future version.
poppler: Mehrere Schwachstellen
view advisory published 2025-08-04
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in poppler ausnutzen, um einen Denial of Service Angriff durchzuführen und um sensible Informationen offenzulegen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-50422US | — | Exploit | ||
Cairo through 1.18.4, as used in Poppler through 25.08.0, has an "unscaled->face == NULL" assertion failure for _cairo_ft_unscaled_font_fini in cairo-ft-font.c. | ||||
| CVE-2025-50420US | — | Exploit | ||
An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of S… | ||||
02
references
External citations — patches, advisories, analysis.
- Amazon Linux Security Advisory ALAS2-2025-2989 vom 2025-09-04external
- Red Hat Bugtracker vom 2025-08-04external
- Debian Security Advisory DLA-4709 vom 2026-08-01external
- openSUSE Security Update OPENSUSE-SU-2026:20697-1 vom 2026-05-08external
- openSUSE Security Update OPENSUSE-SU-2025:15458-1 vom 2025-08-19external
- SUSE Security Update SUSE-SU-2025:03449-1 vom 2025-10-02external
- openSUSE Security Update OPENSUSE-SU-2025:15416-1 vom 2025-08-07external
- SUSE Security Update SUSE-SU-2025:02791-1 vom 2025-08-13external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan