Wind River Support Network

HomeDefectsLIN1021-15294

Fixed

LIN1021-15294 : Security Advisory - poppler - CVE-2025-43903

Created: Apr 22, 2025 Updated: May 21, 2025

Resolved Date: May 21, 2025

Found In Version: 10.21.20.1

Severity: Standard

Applicable for: Wind River Linux LTS 21

Component/s: Userspace

Description

NSSCryptoSignBackend.cc in Poppler before 25.04.0 does not verify the adbe.pkcs7.sha1 signatures on documents, resulting in potential signature forgeries.

CREATE(Triage):(User=admin) CVE-2025-43903 (https://nvd.nist.gov/vuln/detail/CVE-2025-43903)

CVEs

CVE-2025-43903