diff --git a/backport-CVE-2025-52885.patch b/backport-CVE-2025-52885.patch
new file mode 100644
index 0000000000000000000000000000000000000000..0f4e8933b4dbda9f77d74ea2b5996d19febc03c4
--- /dev/null
+++ b/backport-CVE-2025-52885.patch
@@ -0,0 +1,29 @@
+From 4ce27cc826bf90cc8dbbd8a8c87bd913cccd7ec0 Mon Sep 17 00:00:00 2001
+From: Kevin Backhouse <kevinbackhouse@github.com>
+Date: Wed, 3 Sep 2025 14:36:54 +0100
+Subject: [PATCH] Check for duplicate entries
+
+Reference:https://gitlab.freedesktop.org/poppler/poppler/-/commit/4ce27cc826bf90cc8dbbd8a8c87bd913cccd7ec0
+Conflict:no
+---
+ poppler/StructTreeRoot.cc | 4 ++++
+ 1 file changed, 4 insertions(+)
+
+diff --git a/poppler/StructTreeRoot.cc b/poppler/StructTreeRoot.cc
+index eb46147bd1..fc7bf4ceb0 100644
+--- a/poppler/StructTreeRoot.cc
++++ b/poppler/StructTreeRoot.cc
+@@ -136,6 +136,10 @@ void StructTreeRoot::parseNumberTreeNode(const Dict &node)
+                 }
+                 int keyVal = key.getInt();
+                 std::vector<Parent> &vec = parentTree[keyVal];
++                if (!vec.empty()) {
++                    error(errSyntaxError, -1, "Nums item at position {0:d} is a duplicate entry for key {1:d}", i, keyVal);
++                    continue;
++                }
+ 
+                 Object valueArray = nums.arrayGet(i + 1);
+                 if (valueArray.isArray()) {
+-- 
+GitLab
+
diff --git a/poppler.spec b/poppler.spec
index 90959d4d1a876217b4686c6b9702e13f13253e66..60ddde39a473309350ae90748040f9044cf959fb 100644
--- a/poppler.spec
+++ b/poppler.spec
@@ -4,7 +4,7 @@
 
 Name:    poppler
 Version: 23.12.0
-Release: 12
+Release: 13
 Summary: PDF rendering library
 License: GPLv2+ and LGPLv2+ and MIT
 URL:     http://poppler.freedesktop.org/
@@ -22,6 +22,7 @@ Patch6004: backport-CVE-2025-43903.patch
 Patch6005: backport-CVE-2025-52886.patch
 Patch6006: backport-CVE-2025-50420.patch
 Patch6007: backport-CVE-2025-43718.patch
+Patch6008: backport-CVE-2025-52885.patch
 
 BuildRequires: make
 BuildRequires: cmake
@@ -266,6 +267,9 @@ test "$(pkg-config --modversion poppler-qt6)" = "%{version}"
 %{_mandir}/man1/*
 
 %changelog
+* Sat Oct 11 2025 lingsheng <lingsheng1@h-partners.com> - 23.12.0-13
+- fix CVE-2025-52885
+
 * Thu Oct 09 2025 lingsheng <lingsheng1@h-partners.com> - 23.12.0-12
 - fix CVE-2025-43718