Freedesktop Poppler vulnerabilities

• freedesktop poppler Poppler 0.42.0 through 26.10.0 Stack Buffer Overflow via Decrypt::revision6Hash() CVE-2026-107705 Fix available 8.3 HighOctober 8, 2026
• freedesktop poppler Freedesktop Poppler SplashClip.cc clipToPath integer overflow CVE-2026-102621 Fix available 4.8 MediumSeptember 29, 2026
• freedesktop poppler Freedesktop Poppler FoFiTrueType.cc cvtSfnts integer overflow CVE-2026-102620 Fix available 4.8 MediumSeptember 29, 2026
• freedesktop poppler Freedesktop Poppler FoFiTrueType.cc mapCodeToGID integer overflow CVE-2026-93314 Fix available 5.3 MediumSeptember 18, 2026
• freedesktop poppler Freedesktop Poppler JBIG2Stream.cc readCodeTableSeg integer overflow CVE-2026-93313 Fix available 5.3 MediumSeptember 18, 2026
• freedesktop poppler Freedesktop Poppler JBIG2Stream.cc rewind null pointer dereference CVE-2026-93312 Fix available 5.3 MediumSeptember 18, 2026
• freedesktop poppler Freedesktop Poppler SampledFunction Function.cc integer overflow CVE-2026-93311 Fix available 5.3 MediumSeptember 18, 2026
• freedesktop poppler Poppler 24.06.1 through 25.x before 25.04.0 allows stack consumption and a SIGSEGV via deeply... CVE-2025-43718 Fix available 2.9 LowOctober 1, 2025
• freedesktop poppler An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an... CVE-2025-50420 Public exploitFix available 6.5 MediumAugust 4, 2025
• freedesktop poppler Poppler Use After Free Vulnerability CVE-2025-52886 Fix available 5.5 MediumJuly 2, 2025
• freedesktop poppler NSSCryptoSignBackend.cc in Poppler before 25.04.0 does not verify the adbe.pkcs7.sha1 signatures... CVE-2025-43903 Fix available 4.3 MediumApril 18, 2025
• freedesktop poppler Poppler before 25.04.0 allows crafted input files to trigger out-of-bounds reads in the... CVE-2025-32365 Fix available 4.0 MediumApril 5, 2025
• freedesktop poppler A floating-point exception in the PSStack::roll function of Poppler before 25.04.0 can cause an... CVE-2025-32364 Fix available 4.0 MediumApril 5, 2025
• freedesktop poppler libpoppler.so in Poppler through 24.12.0 has an out-of-bounds read vulnerability within the... CVE-2024-56378 Fix available 4.3 MediumDecember 22, 2024
• freedesktop poppler, red hat enterprise linux 10, enterprise linux 6 +4 more +6 more Poppler: pdfinfo: crash in broken documents when using -dests parameter CVE-2024-6239 Fix available 7.5 HighJune 21, 2024
• freedesktop poppler An issue was discovered in Poppler 22.08.0. There is a reachable assertion in Object.h, will lead... CVE-2022-38349 Fix available 6.5 MediumAugust 22, 2023
• freedesktop poppler A reachable Object::getString assertion in Poppler 22.07.0 allows attackers to cause a denial of... CVE-2022-37052 Fix available 6.5 MediumAugust 22, 2023
• freedesktop poppler, debian linux +1 more An issue was discovered in Poppler 22.07.0. There is a reachable abort which leads to denial of... CVE-2022-37051 Fix available 6.5 MediumAugust 22, 2023
• freedesktop poppler, debian linux +1 more In Poppler 22.07.0, PDFDoc::savePageAs in PDFDoc.c callows attackers to cause a denial-of-service... CVE-2022-37050 Fix available 6.5 MediumAugust 22, 2023
• freedesktop poppler, debian linux +1 more Uncontrolled Recursion in pdfinfo, and pdftops in poppler 0.89.0 allows remote attackers to cause... CVE-2020-23804 Fix available 7.5 HighAugust 22, 2023
• freedesktop poppler Buffer Overflow vulnerability in HtmlOutputDev::page in poppler 0.75.0 allows attackers to cause... CVE-2020-18839 Fix available 6.5 MediumAugust 22, 2023
• freedesktop poppler An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause... CVE-2020-36024 Fix available 5.5 MediumAugust 11, 2023
• freedesktop poppler An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause... CVE-2020-36023 Fix available 6.5 MediumAugust 11, 2023
• freedesktop poppler A vulnerability in Outline.cc for Poppler prior to 23.06.0 allows a remote attacker to cause a... CVE-2023-34872 Fix available 5.5 MediumJuly 31, 2023
• freedesktop poppler, debian linux, fedoraproject fedora +2 more Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder ... CVE-2022-38784 Fix available 7.8 HighAugust 30, 2022
• xpdfreader xpdf, freedesktop poppler +1 more Xpdf prior to version 4.04 contains an integer overflow in the JBIG2 decoder (JBIG2Stream:... CVE-2022-38171 Fix available 7.8 HighAugust 22, 2022
• freedesktop poppler, debian linux, fedoraproject fedora +2 more A logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial... CVE-2022-27337 Fix available 6.5 MediumMay 5, 2022
• apple ios, ipados, macos +6 more +8 more An integer overflow was addressed with improved input validation CVE-2021-30860 In KEVPublic exploitFix available EPSS 76.0% 7.8 HighAugust 24, 2021
• freedesktop poppler DCTStream::getChars in DCTStream.cc in Poppler 20.12.1 has a heap-based buffer overflow via a... CVE-2020-35702 Disputed 7.8 HighDecember 25, 2020
• freedesktop poppler, debian linux, redhat enterprise linux +2 more A flaw was found in Poppler in the way certain PDF files were converted into HTML. A remote... CVE-2020-27778 Fix available 7.5 HighNovember 25, 2020
• freedesktop poppler, debian linux +1 more poppler before 0.16.3 has malformed commands that may cause corruption of the internal stack. CVE-2010-4654 Fix available 7.8 HighNovember 13, 2019
• freedesktop poppler, debian linux +1 more An integer overflow condition in poppler before 0.16.3 can occur when parsing CharCodes for fonts. CVE-2010-4653 Fix available 6.5 MediumNovember 13, 2019
• freedesktop poppler Poppler before 0.76.0 has an integer overflow in Parser::makeStream in Parser.cc. CVE-2018-21009 Fix available 8.8 HighSeptember 5, 2019
• freedesktop poppler, canonical ubuntu linux, debian linux +2 more +4 more An issue was discovered in Poppler through 0.78.0. There is a divide-by-zero error in the... CVE-2019-14494 Fix available 7.5 HighAugust 1, 2019
• freedesktop poppler, debian linux, fedoraproject fedora +4 more +6 more The JPXStream::init function in Poppler 0.78.0 and earlier doesn't check for negative values of... CVE-2019-9959 Fix available 6.5 MediumJuly 22, 2019
• freedesktop poppler In Poppler through 0.76.1, there is a heap-based buffer over-read in JPXStream::init in... CVE-2019-12293 Fix available 8.8 HighMay 23, 2019
• freedesktop poppler, fedoraproject fedora +1 more FontInfoScanner::scanFonts in FontInfo.cc in Poppler 0.75.0 has infinite recursion, leading to a... CVE-2019-11026 Fix available 6.5 MediumApril 8, 2019
• freedesktop poppler An issue was discovered in Poppler 0.74.0. There is a NULL pointer dereference in the function... CVE-2019-10873 Fix available 6.5 MediumApril 5, 2019
• freedesktop poppler An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function... CVE-2019-10871 Fix available 6.5 MediumApril 5, 2019
• freedesktop poppler An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function... CVE-2019-10872 Fix available 8.8 HighApril 5, 2019
• freedesktop poppler, canonical ubuntu linux, debian linux +5 more +7 more PDFDoc::markObject in PDFDoc.cc in Poppler 0.74.0 mishandles dict marking, leading to stack... CVE-2019-9903 Fix available 6.5 MediumMarch 21, 2019
• freedesktop poppler, debian linux, fedoraproject fedora +2 more Poppler 0.74.0 has a heap-based buffer over-read in the CairoRescaleBox.cc... CVE-2019-9631 Fix available 9.8 CriticalMarch 8, 2019
• freedesktop poppler An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream:... CVE-2019-9545 8.8 HighMarch 1, 2019
• freedesktop poppler An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream:... CVE-2019-9543 8.8 HighMarch 1, 2019
• freedesktop poppler, canonical ubuntu linux, debian linux +2 more A heap-based buffer underwrite exists in ImageStream::getLine() located at Stream.cc in Poppler 0... CVE-2019-9200 Fix available 8.8 HighFebruary 26, 2019
• freedesktop poppler, canonical ubuntu linux, debian linux +8 more +10 more In Poppler 0.73.0, a heap-based buffer over-read (due to an integer signedness error in the XRef:... CVE-2019-7310 Fix available 7.8 HighFebruary 2, 2019
• freedesktop poppler, canonical ubuntu linux, debian linux +8 more +10 more In Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers to cause a denial-of-service ... CVE-2018-20662 Fix available 6.5 MediumJanuary 3, 2019
• freedesktop poppler, canonical ubuntu linux, debian linux +7 more +9 more A reachable Object::dictLookup assertion in Poppler 0.72.0 allows attackers to cause a denial of... CVE-2018-20650 Fix available 6.5 MediumJanuary 1, 2019
• freedesktop poppler, canonical ubuntu linux +1 more A reachable Object::getString assertion in Poppler 0.72.0 allows attackers to cause a denial of... CVE-2018-20551 Fix available 6.5 MediumDecember 28, 2018
• freedesktop poppler, canonical ubuntu linux, debian linux +2 more XRef::getEntry in XRef.cc in Poppler 0.72.0 mishandles unallocated XRef entries, which allows... CVE-2018-20481 Fix available 6.5 MediumDecember 25, 2018
• Show olderLoading…