Skip to contentFreedesktop Poppler vulnerabilities
- freedesktop poppler, canonical ubuntu linux +1 morePoppler before 0.70.0 has a NULL pointer dereference in _poppler_attachment_new when called from...CVE-2018-19149Fix available6.5 Medium
- freedesktop poppler, canonical ubuntu linux +1 moreAn issue was discovered in Poppler 0.71.0. There is a NULL pointer dereference in goo/GooString.h...CVE-2018-19060Fix available6.5 Medium
- freedesktop poppler, canonical ubuntu linux +1 moreAn issue was discovered in Poppler 0.71.0. There is a out-of-bounds read in EmbFile::save2 in...CVE-2018-19059Fix available6.5 Medium
- freedesktop poppler, canonical ubuntu linux, debian linux +3 more +5 moreAn issue was discovered in Poppler 0.71.0. There is a reachable abort in Object.h, will lead to...CVE-2018-19058Fix available6.5 Medium
- freedesktop poppler, canonical ubuntu linux, debian linux +7 more +9 moreAn issue was discovered in Poppler 0.71.0. There is a memory leak in GfxColorSpace:...CVE-2018-18897Fix available6.5 Medium
- freedesktop poppler, canonical ubuntu linux, debian linux +2 moreIn Poppler 0.68.0, the Parser::getObj() function in Parser.cc may cause infinite recursion via a...CVE-2018-16646Fix available6.5 Medium
- freedesktop poppler, canonical ubuntu linux, debian linux +5 more +7 morePoppler through 0.62 contains an out of bounds read vulnerability due to an incorrect memory...CVE-2018-13988Fix available6.5 Medium
- freedesktop poppler, canonical ubuntu linux, debian linux +4 more +6 moreThe FoFiType1C::cvtGlyph function in fofi/FoFiType1C.cc in Poppler through 0.64.0 allows remote...CVE-2017-18267Fix available5.5 Medium
- freedesktop poppler, canonical ubuntu linux, debian linux +4 more +6 moreThere is a NULL pointer dereference in the AnnotPath::getCoordsLength function in Annot.h in an...CVE-2018-10768Fix available6.5 Medium
- freedesktop poppler, debian linux +1 morefreedesktop.org libpoppler 0.60.1 fails to validate boundaries in TextPool::addWord, leading to...CVE-2017-1000456Fix available8.8 High
- freedesktop poppler, debian linux +1 moreIn Poppler 0.59.0, a NULL Pointer Dereference exists in the GfxImageColorMap::getGrayLine()...CVE-2017-15565Fix available8.8 High
- freedesktop poppler, debian linux +1 moreThe FoFiTrueType::getCFFBlock function in FoFiTrueType.cc in Poppler 0.59.0 has a NULL pointer...CVE-2017-14977Fix available7.5 High
- freedesktop poppler, debian linux +1 moreThe FoFiType1C::convertToType0 function in FoFiType1C.cc in Poppler 0.59.0 has a heap-based...CVE-2017-14976Fix available7.5 High
- freedesktop poppler, debian linux +1 moreThe FoFiType1C::convertToType0 function in FoFiType1C.cc in Poppler 0.59.0 has a NULL pointer...CVE-2017-14975Fix available7.5 High
- freedesktop popplerIn Poppler 0.59.0, a NULL Pointer Dereference exists in the SplashOutputDev::type3D0() function...CVE-2017-14927Fix available5.5 Medium
- freedesktop popplerIn Poppler 0.59.0, memory corruption occurs in a call to Object::dictLookup() in Object.h after a...CVE-2017-14929Fix available7.5 High
- freedesktop poppler, debian linux +1 moreIn Poppler 0.59.0, a NULL Pointer Dereference exists in AnnotRichMedia::Configuration:...CVE-2017-14928Fix available5.5 Medium
- freedesktop poppler, debian linux +1 moreIn Poppler 0.59.0, a NULL Pointer Dereference exists in AnnotRichMedia::Content::Content in Annot...CVE-2017-14926Fix available5.5 Medium
- freedesktop popplerIn Poppler 0.59.0, a floating point exception occurs in the ImageStream class in Stream.cc, which...CVE-2017-14617Fix available7.8 High
- freedesktop popplerIn Poppler 0.59.0, a NULL Pointer Dereference exists in the XRef::parseEntry() function in XRef...CVE-2017-14517Fix available5.5 Medium
- freedesktop popplerIn Poppler 0.59.0, a floating point exception occurs in Splash::scaleImageYuXd() in Splash.cc,...CVE-2017-14520Fix available7.8 High
- freedesktop popplerIn Poppler 0.59.0, memory corruption occurs in a call to Object::streamGetChar in Object.h after...CVE-2017-14519Fix available7.5 High
- freedesktop popplerIn Poppler 0.59.0, a floating point exception exists in the isImageInterpolationRequired()...CVE-2017-14518Fix available7.8 High
- freedesktop popplerAn exploitable heap overflow vulnerability exists in the image rendering functionality of Poppler...CVE-2017-2818Fix available7.5 High
- freedesktop popplerAn exploitable heap overflow vulnerability exists in the image rendering functionality of Poppler...CVE-2017-28147.5 High
- freedesktop popplerAn exploitable integer overflow vulnerability exists in the JPEG 2000 image parsing functionality...CVE-2017-2820Fix available8.8 High
- freedesktop poppler, debian linux +1 moreThe function GfxImageColorMap::getGray in GfxState.cc in Poppler 0.54.0 allows remote attackers...CVE-2017-9865Fix available5.5 Medium
- freedesktop poppler, debian linux, redhat enterprise linux desktop +5 more +7 moreInteger overflow leading to Heap buffer overflow in JBIG2Stream.cc in pdftocairo in Poppler...CVE-2017-9776Fix available7.8 High
- freedesktop poppler, debian linux, redhat enterprise linux desktop +5 more +7 moreStack buffer overflow in GfxState.cc in pdftocairo in Poppler before 0.56 allows remote attackers...CVE-2017-9775Fix available6.5 Medium
- freedesktop popplerpoppler through version 0.55.0 is vulnerable to an uncontrolled recursion in pdfunite resulting...CVE-2017-7515Fix available5.5 Medium
- freedesktop poppler, debian linux +1 moreIn Poppler 0.54.0, a memory leak vulnerability was found in the function Object::initArray in...CVE-2017-9408Fix available6.5 Medium
- freedesktop poppler, debian linux +1 moreIn Poppler 0.54.0, a memory leak vulnerability was found in the function gmalloc in gmem.cc,...CVE-2017-9406Fix available6.5 Medium
- freedesktop popplerpoppler since version 0.17.3 has been vulnerable to NULL pointer dereference in pdfunite...CVE-2017-7511Fix available5.5 Medium
- freedesktop popplerpoppler 0.54.0, as used in Evince and other products, has a NULL pointer dereference in the...CVE-2017-9083Fix available6.5 Medium
- freedesktop poppler, canonical ubuntu linux, debian linux +1 more +3 moreHeap-based buffer overflow in the ExponentialFunction::ExponentialFunction function in Poppler...CVE-2015-8868Fix available7.8 High
- freedesktop popplerDCTStream.cc in Poppler before 0.13.3 allows remote attackers to cause a denial of service (crash...CVE-2010-5110Fix available4.3 Medium
- freedesktop popplerThe openTempFile function in goo/gfile.cc in Xpdf and Poppler 0.24.3 and earlier, when running on...CVE-2013-44723.3 Low
- freedesktop popplerThe JBIG2Stream::readSegments method in JBIG2Stream.cc in Poppler before 0.24.5 does not use the...CVE-2013-72965.0 Medium
- freedesktop poppler, canonical ubuntu linux +1 moreFormat string vulnerability in the extractPages function in utils/pdfseparate.cc in poppler...CVE-2013-4474Public exploitFix availableEPSS 10.5%5.0 Medium
- freedesktop poppler, canonical ubuntu linux +1 moreStack-based buffer overflow in the extractPages function in utils/pdfseparate.cc in poppler...CVE-2013-4473Fix available7.5 High
- freedesktop poppler, opensuse, redhat enterprise linux +1 more +3 moreThe error function in Error.cc in poppler before 0.21.4 allows remote attackers to execute...CVE-2012-2142Fix available7.8 High
- freedesktop popplerpoppler/Stream.cc in poppler before 0.22.1 allows context-dependent attackers to have an...CVE-2013-1790Fix available6.8 Medium
- freedesktop popplersplash/Splash.cc in poppler before 0.22.1 allows context-dependent attackers to cause a denial of...CVE-2013-17894.3 Medium
- freedesktop popplerpoppler before 0.22.1 allows context-dependent attackers to cause a denial of service (crash) and...CVE-2013-1788Fix available6.8 Medium
- apple cups, freedesktop poppler, xpdfreader xpdf +8 more +10 moreThe Gfx::getPos function in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly...CVE-2010-3702Fix available7.5 High
- apple cups, freedesktop poppler, gpdf project gpdf +3 more +5 moreInteger overflow in the StreamPredictor::StreamPredictor function in xpdf 3.02, as used in (1)...CVE-2007-3387Fix available6.8 Medium