CVE-2025-32365

MEDIUM

Security Bulletin: Vulnerabilities in poppler affects IBM Netezza Appliance

Details

CVSS v3: 4.0
NVD published: 2025-04-05 22:15:19
EPSS: <0.1% probability · 23.4th percentile — 2026-04-17
Affected versions: cpe:2.3:a:freedesktop:poppler:*:*:*:*:*:*:*:*
Summary: Poppler before 25.04.0 allows crafted input files to trigger out-of-bounds reads in the JBIG2Bitmap::combine function in JBIG2Stream.cc because of a misplaced isOk check.
Remediation: Not available in our cache.
Exploit info: https://gitlab.freedesktop.org/poppler/poppler/-/issues/1577

TopVuln sends digest emails with high-risk CVE picks across multiple authoritative sources—curated with EPSS and AI. Choose daily per-stream emails and optional weekly or monthly roundups.

Subscribe — free email digest or paid plan

Information is aggregated from multiple authoritative sources for convenience; verify with NVD and vendors before operational decisions.