PO
Product
poppler
On CISA KEVExploited in the wild
96
CVEs
1
On KEV
9.8
Max CVSS
3
New 30D
Severity mix
Critical 1High 33Medium 48Low 4
Watch
Add poppler to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-30860 In wildKEV | 7.8 | Aug 24 | Apple Multiple Products Integer Overflow Vulnerability Affected: before 22.09.0 |
| CVE-2018-21009 | 8.8 | Sep 5 | Poppler before 0.66.0 has an integer overflow in Parser::makeStream in Parser.cc Affected: before 0.76.0 |
| CVE-2019-12293 | 8.8 | May 23 | In Poppler through 0.76.1, there is a heap-based buffer over-read in JPXStream::init in JPEG2000Stream.cc via data with inconsistent heights or widths Affected: through 0.76.1 |
| CVE-2019-10872 | 8.8 | Apr 5 | An issue was discovered in Poppler 0.74.0 Affected: 0.74.0 |
| CVE-2019-9545 | 8.8 | Mar 1 | An issue was discovered in Poppler 0.74.0 Affected: 0.74.0 |
| CVE-2019-9543 | 8.8 | Mar 1 | An issue was discovered in Poppler 0.74.0 Affected: 0.74.0 |
| CVE-2019-9200 | 8.8 | Feb 26 | A heap-based buffer underwrite exists in ImageStream::getLine() located at Stream.cc in Poppler 0.74.0 that can (for example) be triggered by sending a crafted PDF file to the… Affected: 0.74.0 |
| CVE-2017-1000456 | 8.8 | Jan 2 | freedesktop.org libpoppler 0.60.1 fails to validate boundaries in TextPool::addWord, leading to overflow in subsequent calculations Affected: 0.60.1 |
| CVE-2017-15565 | 8.8 | Oct 17 | In Poppler 0.59.0, a NULL Pointer Dereference exists in the GfxImageColorMap::getGrayLine() function in GfxState.cc via a crafted PDF document Affected: 0.59.0 |
| CVE-2017-2820 | 8.8 | Jul 12 | An exploitable integer overflow vulnerability exists in the JPEG 2000 image parsing functionality of freedesktop.org Poppler 0.53.0 Affected: 0.53.0 |
| CVE-2017-2818 | 8.8 | Jul 12 | An exploitable heap overflow vulnerability exists in the image rendering functionality of Poppler 0.53.0 Affected: 0.53.0 |
| CVE-2017-2814 | 8.8 | Jul 12 | An exploitable heap overflow vulnerability exists in the image rendering functionality of Poppler 0.53.0 Affected: 0.53.0 |
| CVE-2022-38784 | 7.8 | Aug 30 | Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc) Affected: through 22.08.0 |
| CVE-2022-38171 | 7.8 | Aug 22 | Xpdf prior to version 4.04 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIG2Stream.cc) Affected: before 22.09.0 |
| CVE-2020-35702 | 7.8 | Dec 25 | DCTStream::getChars in DCTStream.cc in Poppler 20.12.1 has a heap-based buffer overflow via a crafted PDF document Affected: 20.12.1 |
| CVE-2012-2142 | 7.8 | Jan 9 | The error function in Error.cc in poppler before 0.21.4 allows remote attackers to execute arbitrary commands via a PDF containing an escape sequence for a terminal emulator Affected: before 0.21.4 |
| CVE-2010-4654 | 7.8 | Nov 13 | poppler before 0.16.3 has malformed commands that may cause corruption of the internal stack Affected: before 0.16.3 |
| CVE-2019-7310 | 7.8 | Feb 3 | In Poppler 0.73.0, a heap-based buffer over-read (due to an integer signedness error in the XRef::getEntry function in XRef.cc) allows remote attackers to cause a denial of… Affected: 0.73.0 |
| CVE-2017-14617 | 7.8 | Sep 20 | In Poppler 0.59.0, a floating point exception occurs in the ImageStream class in Stream.cc, which may lead to a potential attack when handling malicious PDF files Affected: 0.59.0 |
| CVE-2017-14520 | 7.8 | Sep 17 | In Poppler 0.59.0, a floating point exception occurs in Splash::scaleImageYuXd() in Splash.cc, which may lead to a potential attack when handling malicious PDF files Affected: 0.59.0 |
| CVE-2017-14518 | 7.8 | Sep 17 | In Poppler 0.59.0, a floating point exception exists in the isImageInterpolationRequired() function in Splash.cc via a crafted PDF document Affected: 0.59.0 |
| CVE-2017-9776 | 7.8 | Jun 22 | Integer overflow leading to Heap buffer overflow in JBIG2Stream.cc in pdftocairo in Poppler before 0.56 allows remote attackers to cause a denial of service (application crash) or… Affected: through 0.55.0 |
| CVE-2015-8868 | 7.8 | May 6 | Heap-based buffer overflow in the ExponentialFunction::ExponentialFunction function in Poppler before 0.40.0 allows remote attackers to cause a denial of service (memory… Affected: 0.39.0 |
| CVE-2024-6239 | 7.5 | Jun 21 | A flaw was found in the Poppler's Pdfinfo utility Affected: before 24.06.0 |
| CVE-2020-23804 | 7.5 | Aug 22 | Uncontrolled Recursion in pdfinfo, and pdftops in poppler 0.89.0 allows remote attackers to cause a denial of service via crafted input Affected: 0.89.0 |
| CVE-2020-27778 | 7.5 | Dec 3 | A flaw was found in Poppler in the way certain PDF files were converted into HTML Affected: before 0.76.0 |
| CVE-2019-14494 | 7.5 | Aug 1 | An issue was discovered in Poppler through 0.78.0 Affected: through 0.78.0 |
| CVE-2017-14977 | 7.5 | Oct 2 | The FoFiTrueType::getCFFBlock function in FoFiTrueType.cc in Poppler 0.59.0 has a NULL pointer dereference vulnerability due to lack of validation of a table pointer, which allows… Affected: 0.59.0 |
| CVE-2017-14976 | 7.5 | Oct 2 | The FoFiType1C::convertToType0 function in FoFiType1C.cc in Poppler 0.59.0 has a heap-based buffer over-read vulnerability if an out-of-bounds font dictionary index is… Affected: 0.59.0 |
| CVE-2017-14975 | 7.5 | Oct 2 | The FoFiType1C::convertToType0 function in FoFiType1C.cc in Poppler 0.59.0 has a NULL pointer dereference vulnerability because a data structure is not initialized, which allows… Affected: 0.59.0 |
| CVE-2017-14929 | 7.5 | Sep 30 | In Poppler 0.59.0, memory corruption occurs in a call to Object::dictLookup() in Object.h after a repeating series of Gfx::display, Gfx::go, Gfx::execOp, Gfx::opFill,… Affected: 0.59.0 |
| CVE-2017-14519 | 7.5 | Sep 17 | In Poppler 0.59.0, memory corruption occurs in a call to Object::streamGetChar in Object.h after a repeating series of Gfx::display, Gfx::go, Gfx::execOp, Gfx::opShowText, and… Affected: 0.59.0 |
| CVE-2025-32365 | 7.1 | Apr 5 | Poppler before 25.04.0 allows crafted input files to trigger out-of-bounds reads in the JBIG2Bitmap::combine function in JBIG2Stream.cc because of a misplaced isOk check Affected: before 25.04.0 |
Showing 33