CVE-2025-43718

Poppler 24.06.1 through 25.x before 25.04.0 allows stack consumption and a SIGSEGV via deeply nested structures within the metadata (such as GTS_PDFEVersion) of a PDF document, e.g., a regular expression for a long pdfsubver string. This occurs in Dict::lookup, Catalog::getMetadata, and associated functions in PDFDoc, with deep recursion in the regex executor (std::__detail::_Executor).

Database specific

{
    "cna_assigner": "mitre",
    "cwe_ids": [
        "CWE-674"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/43xxx/CVE-2025-43718.json"
}

References

Affected packages

Git / gitlab.freedesktop.org/poppler/poppler

Affected ranges

Type

GIT

Repo

https://gitlab.freedesktop.org/poppler/poppler

Events

Introduced

c670e8e1fd8cc4630b8e02f195681027edd4c19a

Fixed

a0f064e8393d0f9dc62d630f08d2c961b37c5a27

Fixed

f54b815672117c250420787c8c006de98e8c7408

Database specific

Show details

{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "24.06.1"
                },
                {
                    "fixed": "25.04.0"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandardRange"
        },
        {
            "range": [
                {
                    "fixed": "f54b815672117c250420787c8c006de98e8c7408"
                }
            ],
            "source": "REFERENCES_COMMIT"
        }
    ]
}

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-43718.json"

vanir_signatures

[
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "233156423336985581638429439115477991496",
                "152454795627015377293669816595596351114",
                "299659320981981766195249654867236296863",
                "204554762598959474702255895620365038536",
                "328067327222318434627407393269653035557"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2025-43718-3aa31dbf",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://gitlab.freedesktop.org/poppler/poppler@f54b815672117c250420787c8c006de98e8c7408",
        "target": {
            "file": "poppler/PDFDoc.cc"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "246324405956984027140250541042169477427",
            "length": 757
        },
        "id": "CVE-2025-43718-7f163dd9",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://gitlab.freedesktop.org/poppler/poppler@f54b815672117c250420787c8c006de98e8c7408",
        "target": {
            "file": "poppler/PDFDoc.cc",
            "function": "pdfConformanceFromString"
        }
    }
]

vanir_signatures_modified

"2026-10-22T16:07:40Z"