{"id":"CVE-2020-36023","aliases":["BELL-CVE-2020-36023","DEBIAN-CVE-2020-36023","DLA-3528-1","DLA-4141-1","EUVD-2020-23606","GHSA-xrv4-xm8w-pm47","MGASA-2023-0262","SUSE-SU-2023:4187-1","SUSE-SU-2023:4362-1","SUSE-SU-2023:4546-1","SUSE-SU-2023:4562-1","UBUNTU-CVE-2020-36023","USN-6299-1"],"status":"published","title":"An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause...","description":"An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted .pdf file to FoFiType1C::cvtGlyph function.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01167,"percentile":0.67559,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-835"],"published":"2023-08-11T00:00:00Z","modified":"2026-10-26T12:02:31Z","fixes":[{"ecosystem":"Debian:12","package":"poppler","fixed_in":["22.08.0-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"poppler","fixed_in":["22.08.0-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"poppler","fixed_in":["22.08.0-2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"poppler","fixed_in":["0.41.0-0ubuntu1.16+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"poppler","fixed_in":["0.62.0-2ubuntu2.14+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"poppler","fixed_in":["0.86.1-0ubuntu1.3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.08.0-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.08.0-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.08.0-2"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.71.0-5+deb10u2"}]}],"versions":["0.71.0-5","0.71.0-5+deb10u1"],"bundled":2},{"source":"osv","ecosystem":"Debian:11","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.09.0-3.1+deb11u2"}]}],"versions":["20.09.0-3.1","20.09.0-3.1+deb11u1"],"bundled":9},{"source":"osv","ecosystem":"Mageia:8","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.12.1-1.4.mga8"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.62.0-150000.4.28.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-16.40.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"poppler-qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-16.40.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-16.40.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"poppler-qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-16.40.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-16.40.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"poppler-qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-16.40.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.24.4-14.41.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.79.0-150200.3.26.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.79.0-150200.3.26.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.79.0-150200.3.26.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.79.0-150200.3.26.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.79.0-150200.3.26.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.41.0-0ubuntu1.16+esm3"}]}],"versions":["0.33.0-0ubuntu3","0.37.0-0ubuntu1","0.38.0-0ubuntu1","0.41.0-0ubuntu1","0.41.0-0ubuntu1.1","0.41.0-0ubuntu1.2","0.41.0-0ubuntu1.3","0.41.0-0ubuntu1.4","0.41.0-0ubuntu1.5","0.41.0-0ubuntu1.6","0.41.0-0ubuntu1.7","0.41.0-0ubuntu1.8","0.41.0-0ubuntu1.9","0.41.0-0ubuntu1.10","0.41.0-0ubuntu1.11","0.41.0-0ubuntu1.12","0.41.0-0ubuntu1.13","0.41.0-0ubuntu1.14","0.41.0-0ubuntu1.15","0.41.0-0ubuntu1.16","0.41.0-0ubuntu1.16+esm1","0.41.0-0ubuntu1.16+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.62.0-2ubuntu2.14+esm1"}]}],"versions":["0.57.0-2ubuntu4","0.57.0-2ubuntu5","0.62.0-1ubuntu1","0.62.0-2ubuntu1","0.62.0-2ubuntu2","0.62.0-2ubuntu2.1","0.62.0-2ubuntu2.2","0.62.0-2ubuntu2.4","0.62.0-2ubuntu2.5","0.62.0-2ubuntu2.6","0.62.0-2ubuntu2.7","0.62.0-2ubuntu2.8","0.62.0-2ubuntu2.9","0.62.0-2ubuntu2.10","0.62.0-2ubuntu2.11","0.62.0-2ubuntu2.12","0.62.0-2ubuntu2.13","0.62.0-2ubuntu2.14"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.86.1-0ubuntu1.3"}]}],"versions":["0.80.0-0ubuntu1","0.80.0-0ubuntu3","0.80.0-0ubuntu4","0.80.0-0ubuntu5","0.85.0-1ubuntu1","0.85.0-1ubuntu3","0.86.1-0ubuntu1","0.86.1-0ubuntu1.1","0.86.1-0ubuntu1.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.41.0-0ubuntu1.16+esm3"}]}],"versions":["0.33.0-0ubuntu3","0.37.0-0ubuntu1","0.38.0-0ubuntu1","0.41.0-0ubuntu1","0.41.0-0ubuntu1.1","0.41.0-0ubuntu1.2","0.41.0-0ubuntu1.3","0.41.0-0ubuntu1.4","0.41.0-0ubuntu1.5","0.41.0-0ubuntu1.6","0.41.0-0ubuntu1.7","0.41.0-0ubuntu1.8","0.41.0-0ubuntu1.9","0.41.0-0ubuntu1.10","0.41.0-0ubuntu1.11","0.41.0-0ubuntu1.12","0.41.0-0ubuntu1.13","0.41.0-0ubuntu1.14","0.41.0-0ubuntu1.15","0.41.0-0ubuntu1.16","0.41.0-0ubuntu1.16+esm1","0.41.0-0ubuntu1.16+esm2"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.62.0-2ubuntu2.14+esm1"}]}],"versions":["0.57.0-2ubuntu4","0.57.0-2ubuntu5","0.62.0-1ubuntu1","0.62.0-2ubuntu1","0.62.0-2ubuntu2","0.62.0-2ubuntu2.1","0.62.0-2ubuntu2.2","0.62.0-2ubuntu2.4","0.62.0-2ubuntu2.5","0.62.0-2ubuntu2.6","0.62.0-2ubuntu2.7","0.62.0-2ubuntu2.8","0.62.0-2ubuntu2.9","0.62.0-2ubuntu2.10","0.62.0-2ubuntu2.11","0.62.0-2ubuntu2.12","0.62.0-2ubuntu2.13","0.62.0-2ubuntu2.14"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.86.1-0ubuntu1.3"}]}],"versions":["0.80.0-0ubuntu1","0.80.0-0ubuntu3","0.80.0-0ubuntu4","0.80.0-0ubuntu5","0.85.0-1ubuntu1","0.85.0-1ubuntu3","0.86.1-0ubuntu1","0.86.1-0ubuntu1.1","0.86.1-0ubuntu1.2"],"bundled":2}],"products":[{"vendor":"freedesktop","product":"poppler"}],"references":[{"url":"https://gitlab.freedesktop.org/poppler/poppler/-/issues/1013","tags":["x_transferred","Exploit","Issue Tracking","Patch","fix","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/08/msg00017.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/04/msg00037.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-36023"},{"url":"https://github.com/advisories/GHSA-xrv4-xm8w-pm47"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2020-36023","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-36023","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2023-0262.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=32242","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6299-1","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234187-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1112424","tags":["report"]},{"url":"https://bugzilla.suse.com/1112428","tags":["report"]},{"url":"https://bugzilla.suse.com/1140745","tags":["report"]},{"url":"https://bugzilla.suse.com/1214256","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18454","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18456","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13287","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-36023","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234362-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1128114","tags":["report"]},{"url":"https://bugzilla.suse.com/1129202","tags":["report"]},{"url":"https://bugzilla.suse.com/1143570","tags":["report"]},{"url":"https://bugzilla.suse.com/1214723","tags":["report"]},{"url":"https://bugzilla.suse.com/1214726","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14292","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9545","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9631","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-37052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48545","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234546-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234562-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-36023","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-36023","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-36024","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2020-36023","description":"An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted .pdf file to FoFiType1C::cvtGlyph function.","status":"published","published":"2023-08-11T00:00:00Z","modified":"2025-11-03T19:25:33.77Z","updated_at":"2026-11-02T14:35:55.128961Z"}],"euvd":[{"id":"EUVD-2020-23606","description":"An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted .pdf file to FoFiType1C::cvtGlyph function.","status":"published","published":"2023-08-11T00:00:00Z","modified":"2025-11-03T19:25:33Z","updated_at":"2026-11-02T19:49:34.152725Z"}],"ghsa":[{"id":"GHSA-xrv4-xm8w-pm47","title":"An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause...","description":"An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted .pdf file to FoFiType1C::cvtGlyph function.","status":"published","published":"2023-08-11T15:30:46Z","modified":"2025-11-03T21:30:51Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-835"],"updated_at":"2026-11-02T15:04:18.176646Z"}],"nvd":[{"id":"CVE-2020-36023","description":"An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted .pdf file to FoFiType1C::cvtGlyph function.","status":"published","published":"2023-08-11T14:15:11.513Z","modified":"2026-06-17T03:14:44.077Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-835"],"updated_at":"2026-11-02T14:06:47.910346Z"}],"osv":[{"id":"BELL-CVE-2020-36023","title":"CVE-2020-36023 does not affect BellSoft software","status":"withdrawn","published":"2023-08-11T14:15:00Z","modified":"2026-01-26T09:46:45.753039Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:15.925958Z"},{"id":"CVE-2020-36023","description":"An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted .pdf file to FoFiType1C::cvtGlyph function.","status":"published","published":"2023-08-11T14:15:11.513Z","modified":"2026-10-20T10:54:20.317684351Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:16.612899Z"},{"id":"DEBIAN-CVE-2020-36023","description":"An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted .pdf file to FoFiType1C::cvtGlyph function.","status":"published","published":"2023-08-11T14:15:11.513Z","modified":"2026-10-26T12:02:31.784094968Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:34.019707Z"},{"id":"UBUNTU-CVE-2020-36023","description":"An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted .pdf file to FoFiType1C::cvtGlyph function.","status":"published","published":"2023-08-11T14:15:00Z","modified":"2026-04-22T12:41:24.457285Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:25.179924Z"},{"id":"DLA-3528-1","title":"poppler - security update","status":"published","published":"2023-08-14T00:00:00Z","modified":"2026-03-09T01:22:37.600356Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"DLA-4141-1","title":"poppler - security update","status":"published","published":"2025-04-28T00:00:00Z","modified":"2026-03-09T01:18:13.180725Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"MGASA-2023-0262","title":"Updated poppler packages fix security vulnerability","description":"An issue was discovered in freedesktop poppler version 20.12.1, allows\nremote attackers to cause a denial of service (DoS) via crafted .pdf file\nto FoFiType1C::cvtGlyph function. (CVE-2020-36023)\n\nAn issue was discovered in freedesktop poppler version 20.12.1, allows\nremote attackers to cause a denial of service (DoS) via crafted .pdf file\nto FoFiType1C::convertToType1 function. (CVE-2020-36024)\n","status":"published","published":"2023-09-11T13:07:54Z","modified":"2026-04-16T04:42:02.158486139Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"SUSE-SU-2023:4187-1","title":"Security update for poppler","description":"This update for poppler fixes the following issues:\n\n- CVE-2019-13287: Fixed an out-of-bounds read vulnerability in the function SplashXPath:strokeAdjust. (bsc#1140745)\n- CVE-2018-18456: Fixed a stack-based buffer over-read via a crafted pdf file. (bsc#1112428)\n- CVE-2018-18454: Fixed heap-based buffer over-read) via a crafted pdf file. (bsc#1112424)\n- CVE-2020-36023: Fixed a stack bugger overflow in FoFiType1C:cvtGlyph. (bsc#1214256)\n","status":"published","published":"2023-10-24T14:53:42Z","modified":"2026-02-04T04:38:26.963467Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4362-1","title":"Security update for poppler","description":"This update for poppler fixes the following issues:\n\n- CVE-2019-9545: Fixed a potential crash due to uncontrolled recursion\n  in the JBIG parser (bsc#1128114).\n- CVE-2019-9631: Fixed an out of bounds read when converting a PDF to\n  an image (bsc#1129202).\n- CVE-2022-37052: Fixed a reachable assertion when extracting pages of\n  a PDf file (bsc#1214726).\n- CVE-2020-36023: Fixed a stack bugger overflow in\n  FoFiType1C:cvtGlyph (bsc#1214256).\n- CVE-2019-13287: Fixed an out-of-bounds read vulnerability in the\n  function SplashXPath:strokeAdjust (bsc#1140745).\n- CVE-2018-18456: Fixed a stack-based buffer over-read via a crafted\n  pdf file (bsc#1112428).\n- CVE-2018-18454: Fixed heap-based buffer over-read via a crafted pdf\n  file (bsc#1112424).\n- CVE-2019-14292: Fixed an out of bounds read in GfxState.cc\n  (bsc#1143570).\n- CVE-2022-48545: Fixed an infinite recursion in\n  Catalog::findDestInTree which can cause denial of service\n  (bsc#1214723).\n","status":"published","published":"2023-11-03T12:48:58Z","modified":"2026-02-04T02:19:12.409862Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4546-1","title":"Security update for poppler","description":"This update for poppler fixes the following issues:\n\n- CVE-2019-9545: Fixed a potential crash due to uncontrolled recursion\n  in the JBIG parser (bsc#1128114).\n- CVE-2019-9631: Fixed an out of bounds read when converting a PDF to\n  an image (bsc#1129202).\n- CVE-2022-37052: Fixed a reachable assertion when extracting pages of\n  a PDf file (bsc#1214726).\n- CVE-2020-36023: Fixed a stack bugger overflow in\n  FoFiType1C:cvtGlyph (bsc#1214256).\n- CVE-2019-14292: Fixed an out of bounds read in GfxState.cc\n  (bsc#1143570).\n- CVE-2022-48545: Fixed an infinite recursion in\n  Catalog::findDestInTree which can cause denial of service\n  (bsc#1214723).\n","status":"published","published":"2023-11-24T08:11:55Z","modified":"2026-02-04T04:29:29.114918Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4562-1","title":"Security update for poppler","description":"This update for poppler fixes the following issues:\n\n- CVE-2019-9545: Fixed an uncontrolled recursion issue that could\n  cause a crash (bsc#1128114).\n- CVE-2022-37052: Fixed a crash that could be triggered when opening\n  a crafted file (bsc#1214726).\n- CVE-2020-36023: Fixed a stack bugger overflow in FoFiType1C:cvtGlyph (bsc#1214256).\n","status":"published","published":"2023-11-24T16:12:20Z","modified":"2026-02-04T04:00:42.397586Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"USN-6299-1","title":"poppler vulnerabilities","description":"It was discovered that poppler incorrectly handled certain malformed PDF\nfiles. If a user or an automated system were tricked into opening a\nspecially crafted PDF file, a remote attacker could possibly use this\nissue to cause a denial of service. (CVE-2020-36023, CVE-2020-36024)\n","status":"published","published":"2023-08-17T19:33:23Z","modified":"2026-06-25T13:32:16.339958505Z","updated_at":"2026-11-02T16:58:17.305935Z"}]}}