PT-2025-15075 · Poppler+7 · Poppler+7

Published 2025-03-24 · Updated 2026-04-13 · CVE-2025-32364

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Poppler versions prior to 25.04.0

Description A floating-point exception in the PSStack::roll function can cause an application to crash when handling malformed inputs associated with INT MIN.

Recommendations For versions prior to 25.04.0, update to version 25.04.0 or later to resolve the issue.

Exploit

Fix

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

ALT-PU-2025-14450

BDU:2025-06077

CVE-2025-32364

DLA-4141-1

JLSEC-2026-85

MGASA-2025-0134

OESA-2025-1390

OPENSUSE-SU-2025:14976-1

OPENSUSE-SU-2025_1172-1

OPENSUSE-SU-2025_1173-1

OPENSUSE-SU-2025_1342-1

SUSE-SU-2025:01780-1

SUSE-SU-2025:1172-1

SUSE-SU-2025:1173-1

SUSE-SU-2025:1339-1

SUSE-SU-2025:1342-1

SUSE-SU-2025_01780-1

SUSE-SU-2025_1339-1

SUSE-SU-2025_1342-1

USN-7426-1

USN-7426-2

Affected Products

Alt Linux

Astra Linux

Debian

Linuxmint

Poppler

Red Os

Suse

Ubuntu

References · 57

• 🔥 https://gitlab.freedesktop.org/poppler/poppler/-/issues/1574 · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2025:1342-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7426-2 · Vendor Advisory
• https://osv.dev/vulnerability/JLSEC-2026-85 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7426-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-32365 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-1390 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7426-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-32364 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-32364 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se38-bulletin-2026-0126SE38 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1339-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-32364 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-0811SE18 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2025-1020SE47 · Vendor Advisory