https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-07T12:16:33.905826+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2025-43718 CVE-2025-43718 2026-10-07T12:16:34.071061+00:00

Affected: freedesktop Poppler

Poppler 24.06.1 through 25.x before 25.04.0 allows stack consumption and a SIGSEGV via deeply nested structures within the metadata (such as GTS_PDFEVersion) of a PDF document, e.g., a regular expression for a long pdfsubver string. This occurs in Dict::lookup, Catalog::getMetadata, and associated functions in PDFDoc, with deep recursion in the regex executor (std::__detail::_Executor).

 https://vulnerability.circl.lu/vuln/usn-7803-1 USN-7803-1 — poppler vulnerability 2026-10-07T12:16:34.071249+00:00

Affected: Ubuntu:22.04:LTS: poppler, Ubuntu:24.04:LTS: poppler

It was discovered that poppler incorrectly handled certain PDF files. If a user or automated system were tricked into opening a specially crafted document, a remote attacker could use this issue to cause poppler to crash, leading to a denial of service.