← Database

CVE-2025-43903

MEDIUM CVSS: 4.3 Published: 2025-04-18 Modified: 2026-06-17

Description

NSSCryptoSignBackend.cc in Poppler before 25.04.0 does not verify the adbe.pkcs7.sha1 signatures on documents, resulting in potential signature forgeries.

Affected Platforms

Freedesktop Poppler

Weakness Type

CWE-347

References