CVE-2025-11896

In Xpdf 4.05 (and earlier), a PDF object loop in a CMap, via the "UseCMap" entry, leads to infinite recursion and a stack overflow.

Score

CVSS 4.0 2.1 Low

Status

Deferred - xpdf@xpdfreader.com

Published

2025-10-16

Last modified

2026-10-19

Weaknesses

CWE-674

Affected products

• Xpdf (Xpdf)

References

• https://www.xpdfreader.com/security-bug/object-loops.html