Poppler vulnerabilities

Products

• Poppler 50

Newest

• freedesktop poppler Poppler 0.42.0 through 26.10.0 Stack Buffer Overflow via Decrypt::revision6Hash() CVE-2026-107705 Fix available 8.3 HighOctober 8, 2026
• freedesktop poppler Freedesktop Poppler SplashClip.cc clipToPath integer overflow CVE-2026-102621 Fix available 4.8 MediumSeptember 29, 2026
• freedesktop poppler Freedesktop Poppler FoFiTrueType.cc cvtSfnts integer overflow CVE-2026-102620 Fix available 4.8 MediumSeptember 29, 2026
• freedesktop poppler Freedesktop Poppler FoFiTrueType.cc mapCodeToGID integer overflow CVE-2026-93314 Fix available 5.3 MediumSeptember 18, 2026
• freedesktop poppler Freedesktop Poppler JBIG2Stream.cc readCodeTableSeg integer overflow CVE-2026-93313 Fix available 5.3 MediumSeptember 18, 2026
• freedesktop poppler Freedesktop Poppler JBIG2Stream.cc rewind null pointer dereference CVE-2026-93312 Fix available 5.3 MediumSeptember 18, 2026
• freedesktop poppler Freedesktop Poppler SampledFunction Function.cc integer overflow CVE-2026-93311 Fix available 5.3 MediumSeptember 18, 2026
• poppler innodata labs Uncontrolled memory usage in Innodata Labs’ Poppler JPX decoder CVE-2026-12600 8.7 HighAugust 25, 2026
• poppler GHSL-2025-042: Poppler has Use-After-Free CVE-2025-52885 Fix available 6.1 MediumOctober 10, 2025
• freedesktop poppler Poppler 24.06.1 through 25.x before 25.04.0 allows stack consumption and a SIGSEGV via deeply... CVE-2025-43718 Fix available 2.9 LowOctober 1, 2025
• freedesktop poppler Poppler Use After Free Vulnerability CVE-2025-52886 Fix available 5.5 MediumJuly 2, 2025
• freedesktop poppler NSSCryptoSignBackend.cc in Poppler before 25.04.0 does not verify the adbe.pkcs7.sha1 signatures... CVE-2025-43903 Fix available 4.3 MediumApril 18, 2025
• freedesktop poppler Poppler before 25.04.0 allows crafted input files to trigger out-of-bounds reads in the... CVE-2025-32365 Fix available 4.0 MediumApril 5, 2025
• freedesktop poppler A floating-point exception in the PSStack::roll function of Poppler before 25.04.0 can cause an... CVE-2025-32364 Fix available 4.0 MediumApril 5, 2025
• freedesktop poppler, debian linux, redhat enterprise linux +2 more A flaw was found in Poppler in the way certain PDF files were converted into HTML. A remote... CVE-2020-27778 Fix available 7.5 HighNovember 25, 2020
• freedesktop poppler, debian linux +1 more poppler before 0.16.3 has malformed commands that may cause corruption of the internal stack. CVE-2010-4654 Fix available 7.8 HighNovember 13, 2019
• freedesktop poppler, debian linux +1 more An integer overflow condition in poppler before 0.16.3 can occur when parsing CharCodes for fonts. CVE-2010-4653 Fix available 6.5 MediumNovember 13, 2019
• xpdfreader xpdf, poppler +1 more In xpdf, the xref table contains an infinite loop which allows remote attackers to cause a denial... CVE-2010-0207 Fix available 5.5 MediumOctober 30, 2019
• freedesktop poppler An exploitable heap overflow vulnerability exists in the image rendering functionality of Poppler... CVE-2017-2818 Fix available 7.5 HighJuly 12, 2017
• freedesktop poppler An exploitable heap overflow vulnerability exists in the image rendering functionality of Poppler... CVE-2017-2814 7.5 HighJuly 12, 2017
• freedesktop poppler An exploitable integer overflow vulnerability exists in the JPEG 2000 image parsing functionality... CVE-2017-2820 Fix available 8.8 HighJuly 7, 2017
• freedesktop poppler poppler through version 0.55.0 is vulnerable to an uncontrolled recursion in pdfunite resulting... CVE-2017-7515 Fix available 5.5 MediumJune 6, 2017
• freedesktop poppler poppler since version 0.17.3 has been vulnerable to NULL pointer dereference in pdfunite... CVE-2017-7511 Fix available 5.5 MediumMay 30, 2017
• freedesktop poppler, opensuse, redhat enterprise linux +1 more +3 more The error function in Error.cc in poppler before 0.21.4 allows remote attackers to execute... CVE-2012-2142 Fix available 7.8 HighAugust 26, 2013
• poppler The PostScriptFunction::PostScriptFunction function in poppler/Function.cc in the PDF parser in... CVE-2010-3703 Fix available 4.3 MediumOctober 13, 2010
• foolabs xpdf, kde kdegraphics, poppler +1 more +3 more The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5,... CVE-2010-3704 Fix available 6.8 MediumOctober 12, 2010
• poppler Buffer overflow in the ABWOutputDev::endWord function in poppler/ABWOutputDev.cc in Poppler (aka... CVE-2009-3938 Fix available 6.8 MediumNovember 13, 2009
• poppler Multiple integer overflows in Poppler 0.10.5 and earlier allow remote attackers to cause a denial... CVE-2009-3605 Fix available 6.8 MediumNovember 2, 2009
• poppler Integer overflow in the create_surface_from_thumbnail_data function in glib/poppler-page.cc in... CVE-2009-3607 Fix available 9.3 HighOctober 21, 2009
• foolabs xpdf, poppler, glyphandcog xpdfreader +2 more Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and... CVE-2009-3609 Fix available 4.3 MediumOctober 21, 2009
• foolabs xpdf, poppler, glyphandcog xpdfreader +2 more Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4... CVE-2009-3608 Fix available EPSS 10.2% 9.3 HighOctober 21, 2009
• foolabs xpdf, poppler, glyphandcog xpdfreader +2 more Integer overflow in the PSOutputDev::doImageL1Sep function in Xpdf before 3.02pl4, and Poppler 0... CVE-2009-3606 Fix available 9.3 HighOctober 21, 2009
• foolabs xpdf, poppler, glyphandcog xpdfreader +2 more The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x,... CVE-2009-3604 Fix available 9.3 HighOctober 21, 2009
• foolabs xpdf, poppler, glyphandcog xpdfreader +2 more Integer overflow in the SplashBitmap::SplashBitmap function in Xpdf 3.x before 3.02pl4 and... CVE-2009-3603 Fix available 9.3 HighOctober 21, 2009
• poppler Integer overflow in the JBIG2 decoding feature in the SplashBitmap::SplashBitmap function in... CVE-2009-1188 Fix available 5.0 MediumApril 23, 2009
• poppler Integer overflow in the JBIG2 decoding feature in Poppler before 0.10.6 allows remote attackers... CVE-2009-1187 Fix available 5.0 MediumApril 23, 2009
• apple cups, foolabs xpdf, poppler +1 more +3 more The JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6,... CVE-2009-1183 Fix available 4.3 MediumApril 23, 2009
• apple cups, foolabs xpdf, poppler +1 more +3 more Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and... CVE-2009-1182 Fix available 7.5 HighApril 23, 2009
• apple cups, foolabs xpdf, poppler +1 more +3 more The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and... CVE-2009-1181 Fix available 4.3 MediumApril 23, 2009
• apple cups, foolabs xpdf, poppler +1 more +3 more The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and... CVE-2009-1180 Fix available 6.8 MediumApril 23, 2009
• apple cups, foolabs xpdf, poppler +1 more +3 more Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier,... CVE-2009-1179 Fix available 6.8 MediumApril 23, 2009
• apple cups, foolabs xpdf, poppler +1 more +3 more Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9... CVE-2009-0800 Fix available 6.8 MediumApril 23, 2009
• apple cups, foolabs xpdf, poppler +1 more +3 more The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and... CVE-2009-0799 Fix available 4.3 MediumApril 23, 2009
• apple cups, foolabs xpdf, glyphandcog xpdfreader +1 more +3 more The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allows... CVE-2009-0166 Fix available 4.3 MediumApril 23, 2009
• poppler The JBIG2Stream::readSymbolDictSeg function in Poppler before 0.10.4 allows remote attackers to... CVE-2009-0756 Public exploitFix available EPSS 10.1% 5.0 MediumMarch 3, 2009
• poppler The FormWidgetChoice::loadDefaults function in Poppler before 0.10.4 allows remote attackers to... CVE-2009-0755 Public exploitFix available EPSS 10.8% 5.0 MediumMarch 3, 2009
• poppler The Page destructor in Page.cc in libpoppler in Poppler 0.8.4 and earlier deletes a pageWidgets... CVE-2008-2950 Public exploitFix available EPSS 15.0% 7.5 HighJuly 7, 2008
• poppler The CairoFont::create function in CairoFontEngine.cc in Poppler, possibly before 0.8.0, as used... CVE-2008-1693 Fix available 6.8 MediumApril 17, 2008
• easy software products cups, kde kpdf, libextractor +24 more +26 more Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and... CVE-2005-3626 Fix available 5.0 MediumJanuary 25, 2005
• easy software products cups, kde kpdf, libextractor +24 more +26 more Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and... CVE-2005-3625 Fix available 10.0 HighJanuary 25, 2005
• Show olderLoading…