CVE-2025-11896CWE-674

CVE-2025-11896

published October 17, 2025

CVSS
2.1
EPSS
0%
Percentile
6.0
In the wild
Unconfirmed
What it is

In Xpdf 4.05 (and earlier), a PDF object loop in a CMap, via the "UseCMap" entry, leads to infinite recursion and a stack overflow.

The record
Technical detail
CVSS
2.1 · NONE
CVSS v4.0
Not supplied
EPSS
0.00170 · 6.0th percentile
Weakness
CWE-674 · Uncontrolled Recursion
Published
2025-10-17T02:15Z
References (1)
https://www.xpdfreader.com/security-bug/object-loops.html · [email protected]
EPSS history
Timeline
  • 16 OCT 21:59Z
    Stack overflow in Xpdf 4.05 due to object loop in PDF CMap
    cvelistv5