CVE-2025-43903

—

CVSS 3.1

3.3 low

EPSS

<1%p1

Published

Apr 18, 2025 (Apr 18, 2025)

Modified

Jun 17, 2026

Description

NSSCryptoSignBackend.cc in Poppler before 25.04.0 does not verify the adbe.pkcs7.sha1 signatures on documents, resulting in potential signature forgeries.

Vendors: freedesktop
Products: poppler
Weakness: CWE-347
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.1%)

In the news0 stories

No ingested article mentions this CVE yet.