Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-52886

Опубликовано: 02 июл. 2025
Источник: nvd
CVSS3: 5.9
EPSS Низкий

Описание

Poppler is a PDF rendering library. Versions prior to 25.06.0 use std::atomic_int for reference counting. Because std::atomic_int is only 32 bits, it is possible to overflow the reference count and trigger a use-after-free. Version 25.06.0 patches the issue.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:freedesktop:poppler:*:*:*:*:*:*:*:*
Версия до 25.06.0 (исключая)

EPSS

Процентиль: 23%
0.00075
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 5.9
ubuntu
4 месяца назад

Poppler is a PDF rendering library. Versions prior to 25.06.0 use `std::atomic_int` for reference counting. Because `std::atomic_int` is only 32 bits, it is possible to overflow the reference count and trigger a use-after-free. Version 25.06.0 patches the issue.

CVSS3: 4
redhat
4 месяца назад

Poppler is a PDF rendering library. Versions prior to 25.06.0 use `std::atomic_int` for reference counting. Because `std::atomic_int` is only 32 bits, it is possible to overflow the reference count and trigger a use-after-free. Version 25.06.0 patches the issue.

CVSS3: 5.9
debian
4 месяца назад

Poppler is a PDF rendering library. Versions prior to 25.06.0 use `std ...

suse-cvrf
4 месяца назад

Security update for poppler

suse-cvrf
4 месяца назад

Security update for poppler

EPSS

Процентиль: 23%
0.00075
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-416