CVE-2025-50420

MediumCVSS 6.5

Published: 04/08/2025(UTC)Updated: 05/07/2026(UTC)Translated: 06/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.31%

23th percentile - higher than 23% of all known CVEs

Summary

A vulnerability in the pdfseparate utility of the poppler library version 25.04.0 allows an attacker to trigger infinite recursion by supplying a crafted PDF file. This leads to a Denial of Service (DoS).

Risk Assessment

An attacker can remotely crash applications using pdfseparate, causing service disruption and potential financial losses.

Recommendation

Update the poppler library to the latest available version that includes a fix for the infinite recursion issue.

Original NVD description (English source)

An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).