What’s Vulnerable › Vulnerabilities

CVE-2025-50422

• Severity: low (CVSS 2.9 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-08-04 · updated 2026-06-17
• Weakness: CWE-617

Description

Cairo through 1.18.4, as used in Poppler through 25.08.0, has an "unscaled->face == NULL" assertion failure for _cairo_ft_unscaled_font_fini in cairo-ft-font.c.

Affected products

• Red Hat, Inc. Cairo: through 1.18.4

References

• https://github.com/Landw-hub/CVE-2025-50422
• https://gitlab.freedesktop.org/cairo/cairo/-/merge_requests/621
• https://gitlab.freedesktop.org/poppler/poppler/-/issues/1591
• https://gitlab.freedesktop.org/poppler/poppler/-/issues/1591#note_3045081

Get alerted when CVE-2025-50422 or the next vulnerability affects your stack