Advisories · Technology
freedesktop poppler.
Every CVE that names freedesktop poppler among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.3 High
Poppler 0.42.0 through 26.10.0 Stack Buffer Overflow via Decrypt::revision6Hash()
- freedesktop poppler
- Memory corruption
- CVSS 4.8 Medium
Freedesktop Poppler SplashClip.cc clipToPath integer overflow
- Freedesktop Poppler
- Memory corruption
- CWE-189
- CVSS 4.8 Medium
Freedesktop Poppler FoFiTrueType.cc cvtSfnts integer overflow
- Freedesktop Poppler
- Memory corruption
- CWE-189
- CVSS 5.3 Medium
Freedesktop Poppler FoFiTrueType.cc mapCodeToGID integer overflow
- Freedesktop Poppler
- Memory corruption
- CWE-189
- CVSS 5.3 Medium
Freedesktop Poppler JBIG2Stream.cc readCodeTableSeg integer overflow
- Freedesktop Poppler
- Memory corruption
- CWE-189
- CVSS 5.3 Medium
Freedesktop Poppler JBIG2Stream.cc rewind null pointer dereference
- Freedesktop Poppler
- Denial of service
- Memory corruption
- CVSS 5.3 Medium
Freedesktop Poppler SampledFunction Function.cc integer overflow
- Freedesktop Poppler
- Memory corruption
- CWE-189
- CVSS 2.9 Low
Uncontrolled recursion in freedesktop Poppler
- freedesktop Poppler
- Denial of service
- CVSS 4.3 Medium
Improper signature verification in freedesktop Poppler
- freedesktop Poppler
- Weak cryptography or TLS
- CVSS 4.0 Medium
Out-of-bounds read in freedesktop Poppler
- freedesktop Poppler
- Memory corruption
- CVSS 4.0 Medium
Integer overflow in freedesktop Poppler
- freedesktop Poppler
- Memory corruption