Alerts This Week
Warning Icon 1 1,111
Alerts This Week
Warning Icon 1 1,111

Ubuntu 22.04 LTS: poppler Critical Denial of Service Issue USN-7675-1

ubuntu
Calendar Grey July 28, 2025
Dist Ubuntu Esm H88
Ubuntu has released a security notice about a critical poppler vulnerability. This could let attackers create denial of service errors through crafted files, affecting user access
poppler could be made to crash or run programs if it opened a specially crafted file.

Summary

poppler could be made to crash or run programs if it opened a specially

crafted file.

Software Description:

- poppler: PDF rendering library

Details:

Kevin Backhouse discovered that poppler incorrectly handled documents with

a large number of annotations. If a user or automated system were tricked

into opening a specially crafted document, a remote attacker could use

this issue to cause poppler to consume resources, leading to a denial of

service, or possibly execute arbitrary code.

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.04
  libpoppler147                   25.03.0-3ubuntu1.1
  poppler-utils                   25.03.0-3ubuntu1.1

Ubuntu 24.04 LTS
  libpoppler134                   24.02.0-1ubuntu9.5
  poppler-utils                   24.02.0-1ubuntu9.5

Ubuntu 22.04 LTS
  libpoppler118                   22.02.0-2ubuntu0.9
  poppler-utils                   22.02.0-2ubuntu0.9

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-7675-1

CVE-2025-52886

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-7675-1

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here