CVE-2025-43718

Name of the Vulnerable Software and Affected Versions Poppler versions 24.06.1 through 25.04.0

Description The software is susceptible to a stack consumption issue leading to a SIGSEGV signal. This occurs when processing PDF documents containing deeply nested structures within their metadata, such as the GTS PDFEVersion field. The issue is present in functions including Dict::lookup, Catalog::getMetadata, and related functions within PDFDoc, specifically due to deep recursion in the regular expression executor (std:: detail:: Executor).

Recommendations Update to version 25.04.0 or later.