PO
Product
poppler
On CISA KEVExploited in the wild
96
CVEs
1
On KEV
9.8
Max CVSS
3
New 30D
Severity mix
Critical 1High 33Medium 48Low 4
Watch
Add poppler to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-102621 | 3.3 | Sep 29 | Freedesktop Poppler SplashClip.cc clipToPath integer overflow Affected: 26.08 |
| CVE-2026-102620 | 3.3 | Sep 29 | Freedesktop Poppler FoFiTrueType.cc cvtSfnts integer overflow Affected: 26.06.0; 26.07.0; 26.08.0 |
| CVE-2025-43903 | 3.3 | Apr 18 | NSSCryptoSignBackend.cc in Poppler before 25.04.0 does not verify the adbe.pkcs7.sha1 signatures on documents, resulting in potential signature forgeries Affected: before 25.04.0 |
| CVE-2025-43718 | 2.9 | Oct 1 | Poppler 24.06.1 through 25.x before 25.04.0 allows stack consumption and a SIGSEGV via deeply nested structures within the metadata (such as GTS_PDFEVersion) of a PDF document,… Affected: 24.06.1 before 25.04.0 |
Showing 4