Every CVE Search/ Get API key

CVE-2020-36024

An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause...

5.5 MediumFix available

An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted .pdf file to FoFiType1C::convertToType1 function.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.53%Up 0.5 points since Aug 12, 2023
90%50%10%1%

What each source reports

NVD Score used 5.5

An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted .pdf file to FoFiType1C::convertToType1 function.

Record
CVE-2020-36024
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-476
Updated
2026-11-02
CVE List No score

An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted .pdf file to FoFiType1C::convertToType1 function.

Record
CVE-2020-36024
Updated
2026-11-02
EUVDEUVD-2020-23607 No score

An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted .pdf file to FoFiType1C::convertToType1 function.

Record
EUVD-2020-23607
Updated
2026-11-02
GitHub AdvisoriesGHSA-4pj9-rq3x-vjw5 5.5

An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause...

An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted .pdf file to FoFiType1C::convertToType1 function.

Record
GHSA-4pj9-rq3x-vjw5
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-476
Updated
2026-11-02
OSV 5.5

An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted .pdf file to FoFiType1C::convertToType1 function.

Record
CVE-2020-36024
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2020-36024 5.5

An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted .pdf file to FoFiType1C::convertToType1 function.

Record
DEBIAN-CVE-2020-36024
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 13 moreShow less
OSVOESA-2025-2620 5.5

poppler security update

Poppler is a free software utility library for rendering Portable Document Format (PDF) documents. \ Its development is supported by freedesktop.org. It is commonly used on Linux systems,and is used by \ the PDF viewers of the open source GNOME and KDE desktop environments.

Security Fix(es):

An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted .pdf file to FoFiType1C::convertToType1 function.(CVE-2020-36024)

Record
OESA-2025-2620
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-2621 5.5

poppler security update

Poppler is a free software utility library for rendering Portable Document Format (PDF) documents. \ Its development is supported by freedesktop.org. It is commonly used on Linux systems,and is used by \ the PDF viewers of the open source GNOME and KDE desktop environments.

Security Fix(es):

An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted .pdf file to FoFiType1C::convertToType1 function.(CVE-2020-36024)

Record
OESA-2025-2621
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-2622 5.5

poppler security update

Poppler is a free software utility library for rendering Portable Document Format (PDF) documents. \ Its development is supported by freedesktop.org. It is commonly used on Linux systems,and is used by \ the PDF viewers of the open source GNOME and KDE desktop environments.

Security Fix(es):

An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted .pdf file to FoFiType1C::convertToType1 function.(CVE-2020-36024)

Record
OESA-2025-2622
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:2979 5.5

Red Hat Security Advisory: poppler security update

Record
RHSA-2024:2979
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2024:2979 5.5

Moderate: poppler security update

Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.

Security Fix(es):

  • poppler: NULL pointer dereference in FoFiType1C::convertToType1 (CVE-2020-36024)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.10 Release Notes linked from the References section.

Record
RLSA-2024:2979
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2020-36024 5.5

An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted .pdf file to FoFiType1C::convertToType1 function.

Record
UBUNTU-CVE-2020-36024
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2024:2979 No score

Moderate: poppler security update

Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.

Security Fix(es):

  • poppler: NULL pointer dereference in FoFiType1C::convertToType1 (CVE-2020-36024)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2024:2979
Updated
2026-11-02
OSVMGASA-2023-0262 No score

Updated poppler packages fix security vulnerability

An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted .pdf file to FoFiType1C::cvtGlyph function. (CVE-2020-36023)

An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted .pdf file to FoFiType1C::convertToType1 function. (CVE-2020-36024)

Record
MGASA-2023-0262
Updated
2026-11-02
OSVSUSE-SU-2023:3981-1 No score

Security update for poppler

This update for poppler fixes the following issues:

  • CVE-2020-23804: Fixed uncontrolled recursion in pdfinfo and pdftops (bsc#1215422).
  • CVE-2020-36024: Fixed NULL Pointer Deference in FoFiType1C:convertToType1 (bsc#1214257).
  • CVE-2022-37050: Fixed denial-of-service via savePageAs in PDFDoc.c (bsc#1214622).
  • CVE-2022-38349: Fixed reachable assertion in Object.h that will lead to denial of service (bsc#1214618).
Record
SUSE-SU-2023:3981-1
Updated
2026-11-02
OSVSUSE-SU-2023:3982-1 No score

Security update for poppler

This update for poppler fixes the following issues:

  • CVE-2020-23804: Fixed uncontrolled recursion in pdfinfo and pdftops (bsc#1215422).
  • CVE-2020-36024: Fixed NULL Pointer Deference in FoFiType1C:convertToType1 (bsc#1214257).
  • CVE-2022-37050: Fixed denial-of-service via savePageAs in PDFDoc.c (bsc#1214622).
  • CVE-2022-37051: Fixed abort in main() in pdfunite.cc (bsc#1214621).
  • CVE-2022-38349: Fixed reachable assertion in Object.h that will lead to denial of service (bsc#1214618).
Record
SUSE-SU-2023:3982-1
Updated
2026-11-02
OSVSUSE-SU-2023:3983-1 No score

Security update for poppler

This update for poppler fixes the following issues:

  • CVE-2020-23804: Fixed uncontrolled recursion in pdfinfo and pdftops (bsc#1215422).
  • CVE-2020-36024: Fixed NULL Pointer Deference in FoFiType1C:convertToType1 (bsc#1214257).
  • CVE-2022-37050: Fixed denial-of-service via savePageAs in PDFDoc.c (bsc#1214622).
  • CVE-2022-37051: Fixed abort in main() in pdfunite.cc (bsc#1214621).
  • CVE-2022-38349: Fixed reachable assertion in Object.h that will lead to denial of service (bsc#1214618).
Record
SUSE-SU-2023:3983-1
Updated
2026-11-02
OSVSUSE-SU-2023:3998-1 No score

Security update for poppler

This update for poppler fixes the following issues:

  • CVE-2020-23804: Fixed uncontrolled recursion in pdfinfo and pdftops (bsc#1215422).
  • CVE-2020-36024: Fixed NULL Pointer Deference in FoFiType1C:convertToType1 (bsc#1214257).
  • CVE-2022-37050: Fixed denial-of-service via savePageAs in PDFDoc.c (bsc#1214622).
  • CVE-2022-37051: Fixed abort in main() in pdfunite.cc (bsc#1214621).
  • CVE-2022-38349: Fixed reachable assertion in Object.h that will lead to denial of service (bsc#1214618).
Record
SUSE-SU-2023:3998-1
Updated
2026-11-02
OSVUSN-6299-1 No score

poppler vulnerabilities

It was discovered that poppler incorrectly handled certain malformed PDF files. If a user or an automated system were tricked into opening a specially crafted PDF file, a remote attacker could possibly use this issue to cause a denial of service. (CVE-2020-36023, CVE-2020-36024)

Record
USN-6299-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
poppler
AlmaLinux:8
 before 20.11.0-11.el8
20.11.0-11.el8
poppler-cpp
AlmaLinux:8
 before 20.11.0-11.el8
20.11.0-11.el8
poppler-cpp-devel
AlmaLinux:8
 before 20.11.0-11.el8
20.11.0-11.el8
poppler-devel
AlmaLinux:8
 before 20.11.0-11.el8
20.11.0-11.el8
poppler-glib
AlmaLinux:8
 before 20.11.0-11.el8
20.11.0-11.el8
poppler-glib-devel
AlmaLinux:8
 before 20.11.0-11.el8
20.11.0-11.el8
poppler-glib-doc
AlmaLinux:8
 before 20.11.0-11.el8
20.11.0-11.el8
poppler-qt5
AlmaLinux:8
 before 20.11.0-11.el8
20.11.0-11.el8
poppler-qt5-devel
AlmaLinux:8
 before 20.11.0-11.el8
20.11.0-11.el8
poppler-utils
AlmaLinux:8
 before 20.11.0-11.el8
20.11.0-11.el8
Show 62 moreShow less
Affected packages
PackageAffectedFixed
poppler
Debian:12
 before 22.08.0-2
22.08.0-2
poppler
Debian:13
 before 22.08.0-2
22.08.0-2
poppler
Debian:14
 before 22.08.0-2
22.08.0-2
poppler
Debian:10
From an advisory covering 2 CVEs
 before 0.71.0-5+deb10u2, plus listed versions
0.71.0-50.71.0-5+deb10u1
0.71.0-5+deb10u2
poppler
Debian:11
From an advisory covering 9 CVEs
 before 20.09.0-3.1+deb11u2, plus listed versions
20.09.0-3.120.09.0-3.1+deb11u1
20.09.0-3.1+deb11u2
poppler
Mageia:8
From an advisory covering 2 CVEs
 before 20.12.1-1.4.mga8
20.12.1-1.4.mga8
poppler
openEuler:20.03-LTS-SP4
 before 0.90.0-17.oe2003sp4
0.90.0-17.oe2003sp4
poppler
openEuler:22.03-LTS-SP3
 before 0.90.0-17.oe2203sp3
0.90.0-17.oe2203sp3
poppler
openEuler:22.03-LTS-SP4
 before 0.90.0-17.oe2203sp4
0.90.0-17.oe2203sp4
poppler
Red Hat:enterprise_linux:8::appstream
 before 0:20.11.0-11.el8
0:20.11.0-11.el8
poppler-cpp-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:20.11.0-11.el8
0:20.11.0-11.el8
poppler-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:20.11.0-11.el8
0:20.11.0-11.el8
poppler-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:20.11.0-11.el8
0:20.11.0-11.el8
poppler-glib
Red Hat:enterprise_linux:8::appstream
 before 0:20.11.0-11.el8
0:20.11.0-11.el8
poppler-glib-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:20.11.0-11.el8
0:20.11.0-11.el8
poppler-qt5
Red Hat:enterprise_linux:8::appstream
 before 0:20.11.0-11.el8
0:20.11.0-11.el8
poppler-qt5-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:20.11.0-11.el8
0:20.11.0-11.el8
poppler-utils
Red Hat:enterprise_linux:8::appstream
 before 0:20.11.0-11.el8
0:20.11.0-11.el8
poppler-utils-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:20.11.0-11.el8
0:20.11.0-11.el8
poppler-cpp
Red Hat:enterprise_linux:8::crb
 before 0:20.11.0-11.el8
0:20.11.0-11.el8
poppler-cpp-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:20.11.0-11.el8
0:20.11.0-11.el8
poppler-cpp-devel
Red Hat:enterprise_linux:8::crb
 before 0:20.11.0-11.el8
0:20.11.0-11.el8
poppler-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:20.11.0-11.el8
0:20.11.0-11.el8
poppler-debugsource
Red Hat:enterprise_linux:8::crb
 before 0:20.11.0-11.el8
0:20.11.0-11.el8
poppler-devel
Red Hat:enterprise_linux:8::crb
 before 0:20.11.0-11.el8
0:20.11.0-11.el8
poppler-glib-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:20.11.0-11.el8
0:20.11.0-11.el8
poppler-glib-devel
Red Hat:enterprise_linux:8::crb
 before 0:20.11.0-11.el8
0:20.11.0-11.el8
poppler-glib-doc
Red Hat:enterprise_linux:8::crb
 before 0:20.11.0-11.el8
0:20.11.0-11.el8
poppler-qt5-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:20.11.0-11.el8
0:20.11.0-11.el8
poppler-qt5-devel
Red Hat:enterprise_linux:8::crb
 before 0:20.11.0-11.el8
0:20.11.0-11.el8
poppler-utils-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:20.11.0-11.el8
0:20.11.0-11.el8
poppler
Rocky Linux:8
 before 0:20.11.0-11.el8
0:20.11.0-11.el8
poppler
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 4 CVEs
 before 0.24.4-14.36.2
0.24.4-14.36.2
poppler
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 5 CVEs
 before 0.43.0-16.35.2
0.43.0-16.35.2
poppler-qt
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 5 CVEs
 before 0.43.0-16.35.2
0.43.0-16.35.2
poppler
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 5 CVEs
 before 0.43.0-16.35.2
0.43.0-16.35.2
poppler-qt
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 5 CVEs
 before 0.43.0-16.35.2
0.43.0-16.35.2
poppler
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 5 CVEs
 before 0.43.0-16.35.2
0.43.0-16.35.2
poppler-qt
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 5 CVEs
 before 0.43.0-16.35.2
0.43.0-16.35.2
poppler
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 5 CVEs
 before 0.62.0-150000.4.25.2
0.62.0-150000.4.25.2
poppler
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 5 CVEs
 before 0.62.0-150000.4.25.2
0.62.0-150000.4.25.2
poppler
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 5 CVEs
 before 0.62.0-150000.4.25.2
0.62.0-150000.4.25.2
poppler
openSUSE:Leap 15.4
From an advisory covering 5 CVEs
 before 0.62.0-150000.4.25.2
0.62.0-150000.4.25.2
poppler
SUSE:Linux Enterprise Module for Basesystem 15 SP4
From an advisory covering 5 CVEs
 before 0.79.0-150200.3.21.2
0.79.0-150200.3.21.2
poppler
SUSE:Linux Enterprise Module for Basesystem 15 SP5
From an advisory covering 5 CVEs
 before 0.79.0-150200.3.21.2
0.79.0-150200.3.21.2
poppler
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 5 CVEs
 before 0.79.0-150200.3.21.2
0.79.0-150200.3.21.2
poppler
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
From an advisory covering 5 CVEs
 before 0.79.0-150200.3.21.2
0.79.0-150200.3.21.2
poppler
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 5 CVEs
 before 0.79.0-150200.3.21.2
0.79.0-150200.3.21.2
poppler
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 5 CVEs
 before 0.79.0-150200.3.21.2
0.79.0-150200.3.21.2
poppler
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 5 CVEs
 before 0.79.0-150200.3.21.2
0.79.0-150200.3.21.2
poppler
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 5 CVEs
 before 0.79.0-150200.3.21.2
0.79.0-150200.3.21.2
poppler
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 5 CVEs
 before 0.79.0-150200.3.21.2
0.79.0-150200.3.21.2
poppler
SUSE:Manager Proxy 4.2
From an advisory covering 5 CVEs
 before 0.79.0-150200.3.21.2
0.79.0-150200.3.21.2
poppler
SUSE:Manager Server 4.2
From an advisory covering 5 CVEs
 before 0.79.0-150200.3.21.2
0.79.0-150200.3.21.2
poppler
SUSE:Enterprise Storage 7.1
From an advisory covering 5 CVEs
 before 0.79.0-150200.3.21.2
0.79.0-150200.3.21.2
poppler
openSUSE:Leap 15.4
From an advisory covering 5 CVEs
 before 0.79.0-150200.3.21.2
0.79.0-150200.3.21.2
poppler
Ubuntu:Pro:16.04:LTS
 before 0.41.0-0ubuntu1.16+esm3, plus listed versions
0.33.0-0ubuntu30.37.0-0ubuntu10.38.0-0ubuntu10.41.0-0ubuntu10.41.0-0ubuntu1.1
Show 17 moreShow less
0.41.0-0ubuntu1.20.41.0-0ubuntu1.30.41.0-0ubuntu1.40.41.0-0ubuntu1.50.41.0-0ubuntu1.60.41.0-0ubuntu1.70.41.0-0ubuntu1.80.41.0-0ubuntu1.90.41.0-0ubuntu1.100.41.0-0ubuntu1.110.41.0-0ubuntu1.120.41.0-0ubuntu1.130.41.0-0ubuntu1.140.41.0-0ubuntu1.150.41.0-0ubuntu1.160.41.0-0ubuntu1.16+esm10.41.0-0ubuntu1.16+esm2
0.41.0-0ubuntu1.16+esm3
poppler
Ubuntu:Pro:18.04:LTS
 before 0.62.0-2ubuntu2.14+esm1, plus listed versions
0.57.0-2ubuntu40.57.0-2ubuntu50.62.0-1ubuntu10.62.0-2ubuntu10.62.0-2ubuntu2
Show 13 moreShow less
0.62.0-2ubuntu2.10.62.0-2ubuntu2.20.62.0-2ubuntu2.40.62.0-2ubuntu2.50.62.0-2ubuntu2.60.62.0-2ubuntu2.70.62.0-2ubuntu2.80.62.0-2ubuntu2.90.62.0-2ubuntu2.100.62.0-2ubuntu2.110.62.0-2ubuntu2.120.62.0-2ubuntu2.130.62.0-2ubuntu2.14
0.62.0-2ubuntu2.14+esm1
poppler
Ubuntu:20.04:LTS
 before 0.86.1-0ubuntu1.3, plus listed versions
0.80.0-0ubuntu10.80.0-0ubuntu30.80.0-0ubuntu40.80.0-0ubuntu50.85.0-1ubuntu1
Show 4 moreShow less
0.85.0-1ubuntu30.86.1-0ubuntu10.86.1-0ubuntu1.10.86.1-0ubuntu1.2
0.86.1-0ubuntu1.3
poppler
Ubuntu:Pro:16.04:LTS
From an advisory covering 2 CVEs
 before 0.41.0-0ubuntu1.16+esm3, plus listed versions
0.33.0-0ubuntu30.37.0-0ubuntu10.38.0-0ubuntu10.41.0-0ubuntu10.41.0-0ubuntu1.1
Show 17 moreShow less
0.41.0-0ubuntu1.20.41.0-0ubuntu1.30.41.0-0ubuntu1.40.41.0-0ubuntu1.50.41.0-0ubuntu1.60.41.0-0ubuntu1.70.41.0-0ubuntu1.80.41.0-0ubuntu1.90.41.0-0ubuntu1.100.41.0-0ubuntu1.110.41.0-0ubuntu1.120.41.0-0ubuntu1.130.41.0-0ubuntu1.140.41.0-0ubuntu1.150.41.0-0ubuntu1.160.41.0-0ubuntu1.16+esm10.41.0-0ubuntu1.16+esm2
0.41.0-0ubuntu1.16+esm3
poppler
Ubuntu:Pro:18.04:LTS
From an advisory covering 2 CVEs
 before 0.62.0-2ubuntu2.14+esm1, plus listed versions
0.57.0-2ubuntu40.57.0-2ubuntu50.62.0-1ubuntu10.62.0-2ubuntu10.62.0-2ubuntu2
Show 13 moreShow less
0.62.0-2ubuntu2.10.62.0-2ubuntu2.20.62.0-2ubuntu2.40.62.0-2ubuntu2.50.62.0-2ubuntu2.60.62.0-2ubuntu2.70.62.0-2ubuntu2.80.62.0-2ubuntu2.90.62.0-2ubuntu2.100.62.0-2ubuntu2.110.62.0-2ubuntu2.120.62.0-2ubuntu2.130.62.0-2ubuntu2.14
0.62.0-2ubuntu2.14+esm1
poppler
Ubuntu:20.04:LTS
From an advisory covering 2 CVEs
 before 0.86.1-0ubuntu1.3, plus listed versions
0.80.0-0ubuntu10.80.0-0ubuntu30.80.0-0ubuntu40.80.0-0ubuntu50.85.0-1ubuntu1
Show 4 moreShow less
0.85.0-1ubuntu30.86.1-0ubuntu10.86.1-0ubuntu1.10.86.1-0ubuntu1.2
0.86.1-0ubuntu1.3

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-36024 is a medium vulnerability (CVSS 5.5) in Freedesktop Poppler, published August 11, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.53%, the 45th percentile. Fixed in poppler 20.11.0-11.el8.

References

Show 33 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open