VULNERABILITY INTELLIGENCE

CVE-2025-11896

EPSS probability0.17%
CISA KEVNot currently listed
Published2025-10-16
Last modified2026-10-19

Description

In Xpdf 4.05 (and earlier), a PDF object loop in a CMap, via the "UseCMap" entry, leads to infinite recursion and a stack overflow.

Weakness classification

  • xpdf@xpdfreader.com: CWE-674

Primary references