Stack Overflow Vulnerability in Xpdf PDF Reader
CVE-2025-11896

2.1LOW

Key Information:

Vendor

XPDF

Status
XPDF
Vendor
CVE Published:
16 October 2025

What is CVE-2025-11896?

In Xpdf versions 4.05 and earlier, a vulnerability exists where an object loop within a PDF's CMap, specifically through the 'UseCMap' entry, can trigger infinite recursion, leading to a stack overflow. This can potentially crash the application, compromising the stability of systems that rely on Xpdf for handling PDF documents. Users are encouraged to apply any available updates or patches to enhance their cybersecurity posture against such vulnerabilities.

Affected Version(s)

Xpdf all 0 <= 4.05

References

https://www.xpdfreader.com/security-bug/object-loops.html

CVSS V4

Score:
2.1
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

landw (GitHub: Landw-hub)
JSON
.
CVE-2025-11896 : Stack Overflow Vulnerability in Xpdf PDF Reader