The vulnerability identified as CVE-2025-52885 is a use-after-free in the StructTreeRoot class of the Poppler PDF rendering library included in Red Hat Hardened Images RPMs. When processing maliciously crafted PDF documents, the application may reference freed memory, leading to crashes or other unexpected behavior. The flaw requires a local user to open or preview the malicious PDF. Red Hat classifies this as a moderate impact vulnerability with a CVSS 3.1 base score of 6.6 (AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H). No mitigation other than applying the vendor update is currently available that meets Red Hat's standards.

Successful exploitation can cause application crashes (denial of service) and potentially lead to memory corruption. The vulnerability requires local user interaction to open or preview a malicious PDF file. The likelihood of exploitation in typical environments is considered moderate to low. There is no indication of active exploitation in the wild.

Red Hat recommends applying the available update to address this vulnerability. No other mitigations meeting Red Hat's usability and stability standards are currently available. Users should update affected packages once patches are released. Monitor Red Hat advisories for official patch availability and guidance.