CVE catalog

CVE-2025-11896

xpdf: CVE-2025-11896

Severity: Low · CVSS 3.3CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Published: Oct 16, 2025, 10:00:00 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.17% · Oct 25, 2026

In Xpdf 4.05 (and earlier), a PDF object loop in a CMap, via the "UseCMap" entry, leads to infinite recursion and a stack overflow.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	xpdf	sid	`3.04+git20260802-1`	not affected
Debian	xpdf	forky	`3.04+git20260802-1`	not affected
Debian	xpdf	trixie	`3.04+git20250304-1`	not affected
Debian	xpdf	bookworm	`3.04+git20220601-1`	not affected
Suse	poppler	linux enterprise server 16.0	`25.04.0-160000.4.1`	fixed
Suse	poppler-qt6	linux enterprise server 16.0	`25.04.0-160000.4.1`	fixed
Suse	poppler	linux enterprise server for sap applications 16.0	`25.04.0-160000.4.1`	fixed
Suse	poppler-qt6	linux enterprise server for sap applications 16.0	`25.04.0-160000.4.1`	fixed
Opensuse	poppler	leap 16.0	`25.04.0-160000.4.1`	fixed
Opensuse	poppler-qt5	leap 16.0	`25.04.0-160000.4.1`	fixed
Opensuse	poppler-qt6	leap 16.0	`25.04.0-160000.4.1`	fixed
Opensuse	poppler	tumbleweed	`25.09.1-4.1`	fixed
Suse	poppler	linux enterprise server ltss extended security 12 sp5	`0.43.0-16.70.1`	fixed
Suse	poppler-qt	linux enterprise server ltss extended security 12 sp5	`0.43.0-16.70.1`	fixed
Suse	poppler	linux enterprise module for basesystem 15 sp7	`0.79.0-150200.3.49.1`	fixed
Suse	poppler	linux enterprise module for basesystem 15 sp6	`24.03.0-150600.3.27.1`	fixed
Suse	poppler	linux enterprise module for basesystem 15 sp7	`24.03.0-150600.3.27.1`	fixed
Suse	poppler	linux enterprise module for package hub 15 sp6	`24.03.0-150600.3.27.1`	fixed
Suse	poppler-qt5	linux enterprise module for package hub 15 sp6	`24.03.0-150600.3.27.1`	fixed
Suse	poppler-qt6	linux enterprise module for package hub 15 sp6	`24.03.0-150600.3.27.1`	fixed
Suse	poppler	linux enterprise module for package hub 15 sp7	`24.03.0-150600.3.27.1`	fixed
Suse	poppler-qt5	linux enterprise module for package hub 15 sp7	`24.03.0-150600.3.27.1`	fixed
Suse	poppler-qt6	linux enterprise module for package hub 15 sp7	`24.03.0-150600.3.27.1`	fixed
Opensuse	poppler	leap 15.6	`24.03.0-150600.3.27.1`	fixed
Opensuse	poppler-qt5	leap 15.6	`24.03.0-150600.3.27.1`	fixed
Opensuse	poppler-qt6	leap 15.6	`24.03.0-150600.3.27.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	xpdf	source	sid	`Not affected`	unimportant	Not reported	Not reported
Debian	xpdf	source	forky	`Not affected`	unimportant	Not reported	Not reported
Debian	xpdf	source	trixie	`Not affected`	unimportant	Not reported	Not reported
Debian	xpdf	source	bookworm	`Not affected`	unimportant	Not reported	Not reported
Suse	poppler	rpm	linux enterprise server 16.0	`25.04.0-160000.4.1`	Not reported	SUSE-SU-2026:20911-1	Not reported
Suse	poppler-qt6	rpm	linux enterprise server 16.0	`25.04.0-160000.4.1`	Not reported	SUSE-SU-2026:20911-1	Not reported
Suse	poppler	rpm	linux enterprise server for sap applications 16.0	`25.04.0-160000.4.1`	Not reported	SUSE-SU-2026:20911-1	Not reported
Suse	poppler-qt6	rpm	linux enterprise server for sap applications 16.0	`25.04.0-160000.4.1`	Not reported	SUSE-SU-2026:20911-1	Not reported
Opensuse	poppler	rpm	leap 16.0	`25.04.0-160000.4.1`	Not reported	OPENSUSE-SU-2026:20397-1	Not reported
Opensuse	poppler-qt5	rpm	leap 16.0	`25.04.0-160000.4.1`	Not reported	OPENSUSE-SU-2026:20397-1	Not reported
Opensuse	poppler-qt6	rpm	leap 16.0	`25.04.0-160000.4.1`	Not reported	OPENSUSE-SU-2026:20397-1	Not reported
Opensuse	poppler	rpm	tumbleweed	`25.09.1-4.1`	Not reported	OPENSUSE-SU-2025:15812-1	Not reported
Suse	poppler	rpm	linux enterprise server ltss extended security 12 sp5	`0.43.0-16.70.1`	Not reported	SUSE-SU-2026:0081-1	Not reported
Suse	poppler-qt	rpm	linux enterprise server ltss extended security 12 sp5	`0.43.0-16.70.1`	Not reported	SUSE-SU-2026:0081-1	Not reported
Suse	poppler	rpm	linux enterprise module for basesystem 15 sp7	`0.79.0-150200.3.49.1`	Not reported	SUSE-SU-2025:4439-1	Not reported
Suse	poppler	rpm	linux enterprise module for basesystem 15 sp6	`24.03.0-150600.3.27.1`	Not reported	SUSE-SU-2025:4434-1	Not reported
Suse	poppler	rpm	linux enterprise module for basesystem 15 sp7	`24.03.0-150600.3.27.1`	Not reported	SUSE-SU-2025:4434-1	Not reported
Suse	poppler	rpm	linux enterprise module for package hub 15 sp6	`24.03.0-150600.3.27.1`	Not reported	SUSE-SU-2025:4434-1	Not reported
Suse	poppler-qt5	rpm	linux enterprise module for package hub 15 sp6	`24.03.0-150600.3.27.1`	Not reported	SUSE-SU-2025:4434-1	Not reported
Suse	poppler-qt6	rpm	linux enterprise module for package hub 15 sp6	`24.03.0-150600.3.27.1`	Not reported	SUSE-SU-2025:4434-1	Not reported
Suse	poppler	rpm	linux enterprise module for package hub 15 sp7	`24.03.0-150600.3.27.1`	Not reported	SUSE-SU-2025:4434-1	Not reported
Suse	poppler-qt5	rpm	linux enterprise module for package hub 15 sp7	`24.03.0-150600.3.27.1`	Not reported	SUSE-SU-2025:4434-1	Not reported
Suse	poppler-qt6	rpm	linux enterprise module for package hub 15 sp7	`24.03.0-150600.3.27.1`	Not reported	SUSE-SU-2025:4434-1	Not reported
Opensuse	poppler	rpm	leap 15.6	`24.03.0-150600.3.27.1`	Not reported	SUSE-SU-2025:4434-1	Not reported
Opensuse	poppler-qt5	rpm	leap 15.6	`24.03.0-150600.3.27.1`	Not reported	SUSE-SU-2025:4434-1	Not reported
Opensuse	poppler-qt6	rpm	leap 15.6	`24.03.0-150600.3.27.1`	Not reported	SUSE-SU-2025:4434-1	Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

[libpoppler162]Unknown
Source package: [poppler]
Details (1)
- 26.07.0-1.2 · x86_64 · tumbleweed
  Unknown · Fixed: 25.09.1-4.1
  Version impact unknown
  dsa · poppler · opensuse · tumbleweed
[libpoppler162-32bit]Unknown
Source package: [poppler]
Details (1)
- 26.07.0-1.2 · x86_64 · tumbleweed
  Unknown · Fixed: 25.09.1-4.1
  Version impact unknown
  dsa · poppler · opensuse · tumbleweed
[libpoppler-cpp3]Unknown
Source package: [poppler]
Details (1)
- 26.07.0-1.2 · x86_64 · tumbleweed
  Unknown · Fixed: 25.09.1-4.1
  Version impact unknown
  dsa · poppler · opensuse · tumbleweed
[libpoppler-cpp3-32bit]Unknown
Source package: [poppler]
Details (1)
- 26.07.0-1.2 · x86_64 · tumbleweed
  Unknown · Fixed: 25.09.1-4.1
  Version impact unknown
  dsa · poppler · opensuse · tumbleweed
[libpoppler-devel]Unknown
Source package: [poppler]
Details (1)
- 26.07.0-1.2 · x86_64 · tumbleweed
  Unknown · Fixed: 25.09.1-4.1
  Version impact unknown
  dsa · poppler · opensuse · tumbleweed
[libpoppler-glib8]Unknown
Source package: [poppler]
Details (1)
- 26.07.0-1.2 · x86_64 · tumbleweed
  Unknown · Fixed: 25.09.1-4.1
  Version impact unknown
  dsa · poppler · opensuse · tumbleweed
[libpoppler-glib8-32bit]Unknown
Source package: [poppler]
Details (1)
- 26.07.0-1.2 · x86_64 · tumbleweed
  Unknown · Fixed: 25.09.1-4.1
  Version impact unknown
  dsa · poppler · opensuse · tumbleweed
[libpoppler-glib-devel]Unknown
Source package: [poppler]
Details (1)
- 26.07.0-1.2 · x86_64 · tumbleweed
  Unknown · Fixed: 25.09.1-4.1
  Version impact unknown
  dsa · poppler · opensuse · tumbleweed
[poppler-tools]Unknown
Source package: [poppler]
Details (1)
- 26.07.0-1.2 · x86_64 · tumbleweed
  Unknown · Fixed: 25.09.1-4.1
  Version impact unknown
  dsa · poppler · opensuse · tumbleweed
[typelib-1_0-Poppler-0_18]Unknown
Source package: [poppler]
Details (1)
- 26.07.0-1.2 · x86_64 · tumbleweed
  Unknown · Fixed: 25.09.1-4.1
  Version impact unknown
  dsa · poppler · opensuse · tumbleweed

[Debian 12 (Bookworm)]

[xpdf]Not affected
Source package: [xpdf]
Details (2)
- 3.04+git20220601-1+b2 · amd64 · bookworm
  Not affected
  dsa · xpdf · debian · bookworm
- 3.04+git20220601-1+b2 · arm64 · bookworm
  Not affected
  dsa · xpdf · debian · bookworm

Observed: Oct 27, 2026, 11:27:27 AM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]