Freedesktop Poppler vulnerabilities

164 known vulnerabilities affecting freedesktop/poppler.

Total CVEs

164

CISA KEV

actively exploited

Public exploits

Exploited in wild

Severity breakdown

CRITICAL9HIGH52MEDIUM97LOW6

Vulnerabilities

SortPage 8 of 9

CVE-2019-10019P4MEDIUMCVSS 5.5≥ 0, < 0.41.0-0ubuntu1.142019-03-24

CVE-2019-10019 [MEDIUM] CVE-2019-10019: An issue was discovered in Xpdf 4 An issue was discovered in Xpdf 4.01.01. There is an FPE in the function PSOutputDev::checkPageSlice at PSOutputDev.cc for nStripes.

osv

CVE-2019-10026P4MEDIUMCVSS 5.5≥ 0, < 0.41.0-0ubuntu1.13≥ 0, < 0.62.0-2ubuntu2.82019-03-25

CVE-2019-10026 [MEDIUM] CVE-2019-10026: An issue was discovered in Xpdf 4 An issue was discovered in Xpdf 4.01.01. There is an FPE in the function PostScriptFunction::exec in Function.cc for the psOpRoll case.

osv

CVE-2019-10020P4MEDIUMCVSS 5.5≥ 0, < 0.41.0-0ubuntu1.42019-03-25

CVE-2019-10020 [MEDIUM] CVE-2019-10020: An issue was discovered in Xpdf 4 An issue was discovered in Xpdf 4.01.01. There is an FPE in the function Splash::scaleImageYuXu at Splash.cc for x Bresenham parameters.

osv

CVE-2019-10025P4MEDIUMCVSS 5.5≥ 0, < 0.41.0-0ubuntu1.13≥ 0, < 0.62.0-2ubuntu2.82019-03-25

CVE-2019-10025 [MEDIUM] CVE-2019-10025: An issue was discovered in Xpdf 4 An issue was discovered in Xpdf 4.01.01. There is an FPE in the function ImageStream::ImageStream at Stream.cc for nBits.

osv

CVE-2019-10024P4MEDIUMCVSS 5.5≥ 0, < 0.41.0-0ubuntu1.42019-03-25

CVE-2019-10024 [MEDIUM] CVE-2019-10024: An issue was discovered in Xpdf 4 An issue was discovered in Xpdf 4.01.01. There is an FPE in the function Splash::scaleImageYuXu at Splash.cc for y Bresenham parameters.

osv

CVE-2020-36024P4MEDIUMCVSS 5.5v20.12.12023-08-11

CVE-2020-36024 [MEDIUM] CWE-476 CVE-2020-36024: An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a d An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted .pdf file to FoFiType1C::convertToType1 function.

nvdosv

CVE-2009-0147P4MEDIUMCVSS 4.3≥ 0, < 0.10.6-12009-04-23

CVE-2009-0147 [MEDIUM] CVE-2009-0147: Multiple integer overflows in the JBIG2 decoder in Xpdf 3 Multiple integer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service (crash) via a crafted PDF file, related to (1) JBIG2Stream::readSymbolDictSeg, (2) JBIG2Stream::readSymbolDictSeg, and (3) JBIG2Stream::readGenericBitmap.

osv

CVE-2009-0166P4MEDIUMCVSS 4.3≥ 0, < 0.10.6-12009-04-23

CVE-2009-0166 [MEDIUM] CVE-2009-0166: The JBIG2 decoder in Xpdf 3 The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers a free of uninitialized memory.

osv

CVE-2017-7515P4MEDIUMCVSS 5.5≤ 0.55.02017-06-06

CVE-2017-7515 [MEDIUM] CWE-674 CVE-2017-7515: poppler through version 0.55.0 is vulnerable to an uncontrolled recursion in pdfunite resulting into poppler through version 0.55.0 is vulnerable to an uncontrolled recursion in pdfunite resulting into potential denial-of-service.

nvdosv

CVE-2017-14517P4MEDIUMCVSS 5.5v0.59.02017-09-17

CVE-2017-14517 [MEDIUM] CWE-476 CVE-2017-14517: In Poppler 0.59.0, a NULL Pointer Dereference exists in the XRef::parseEntry() function in XRef.cc v In Poppler 0.59.0, a NULL Pointer Dereference exists in the XRef::parseEntry() function in XRef.cc via a crafted PDF document.

nvdosv

CVE-2023-34872P4MEDIUMCVSS 5.5fixed in 23.06.02023-07-31

CVE-2023-34872 [MEDIUM] CWE-400 CVE-2023-34872: A vulnerability in Outline.cc for Poppler prior to 23.06.0 allows a remote attacker to cause a Denia A vulnerability in Outline.cc for Poppler prior to 23.06.0 allows a remote attacker to cause a Denial of Service (DoS) (crash) via a crafted PDF file in OutlineItem::open.

nvdosv

CVE-2017-14927P4MEDIUMCVSS 5.5v0.59.02017-09-30

CVE-2017-14927 [MEDIUM] CWE-476 CVE-2017-14927: In Poppler 0.59.0, a NULL Pointer Dereference exists in the SplashOutputDev::type3D0() function in S In Poppler 0.59.0, a NULL Pointer Dereference exists in the SplashOutputDev::type3D0() function in SplashOutputDev.cc via a crafted PDF document.

nvdosv

CVE-2019-10022P4MEDIUMCVSS 5.5≥ 0, < 0.41.0-0ubuntu1.13≥ 0, < 0.62.0-2ubuntu2.82019-03-25

CVE-2019-10022 [MEDIUM] CVE-2019-10022: An issue was discovered in Xpdf 4 An issue was discovered in Xpdf 4.01.01. There is a NULL pointer dereference in the function Gfx::opSetExtGState in Gfx.cc.

osv

CVE-2017-14928P4MEDIUMCVSS 5.5v0.59.02017-09-30

CVE-2017-14928 [MEDIUM] CWE-476 CVE-2017-14928: In Poppler 0.59.0, a NULL Pointer Dereference exists in AnnotRichMedia::Configuration::Configuration In Poppler 0.59.0, a NULL Pointer Dereference exists in AnnotRichMedia::Configuration::Configuration in Annot.cc via a crafted PDF document.

nvdosv

CVE-2017-14926P4MEDIUMCVSS 5.5v0.59.02017-09-30

CVE-2017-14926 [MEDIUM] CWE-476 CVE-2017-14926: In Poppler 0.59.0, a NULL Pointer Dereference exists in AnnotRichMedia::Content::Content in Annot.cc In Poppler 0.59.0, a NULL Pointer Dereference exists in AnnotRichMedia::Content::Content in Annot.cc via a crafted PDF document.

nvdosv

CVE-2025-32364P4MEDIUMCVSS 5.5fixed in 25.04.02025-04-05

CVE-2025-32364 [MEDIUM] CWE-190 CVE-2025-32364: A floating-point exception in the PSStack::roll function of Poppler before 25.04.0 can cause an appl A floating-point exception in the PSStack::roll function of Poppler before 25.04.0 can cause an application to crash when handling malformed inputs associated with INT_MIN.

nvdosv

CVE-2010-3703P4MEDIUMCVSS 4.3≥ 0, < 0.12.4-1.22010-11-05

CVE-2010-3703 [MEDIUM] CVE-2010-3703: The PostScriptFunction::PostScriptFunction function in poppler/Function The PostScriptFunction::PostScriptFunction function in poppler/Function.cc in the PDF parser in poppler 0.8.7 and possibly other versions up to 0.15.1, and possibly other products, allows context-dependent attackers to cause a denial of service (crash) via a PDF file that triggers an uninitialized pointer dereference.

osv

CVE-2010-0207P4MEDIUMCVSS 5.5≥ 0, < 0.16.3-12019-10-30

CVE-2010-0207 [MEDIUM] CVE-2010-0207: In xpdf, the xref table contains an infinite loop which allows remote attackers to cause a denial of service (application crash) in xpdf-based PDF vie In xpdf, the xref table contains an infinite loop which allows remote attackers to cause a denial of service (application crash) in xpdf-based PDF viewers.

osv

CVE-2026-102620P4LOWCVSS 3.3v26.06.0v26.07.0+1 more2026-09-29

CVE-2026-102620 [LOW] CWE-189 CVE-2026-102620: A vulnerability was determined in Freedesktop Poppler 26.06.0/26.07.0/26.08.0. This impacts the func A vulnerability was determined in Freedesktop Poppler 26.06.0/26.07.0/26.08.0. This impacts the function FoFiTrueType::cvtSfnts of the file fofi/FoFiTrueType.cc. This manipulation causes integer overflow. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Patch name: 245d3c6823377755f2c1d5fdddd010279

nvd

CVE-2013-4472P4LOWCVSS 3.3≤ 0.24.3v0.24.0+2 more2014-04-22

CVE-2013-4472 [LOW] CWE-59 CVE-2013-4472: The openTempFile function in goo/gfile.cc in Xpdf and Poppler 0.24.3 and earlier, when running on a The openTempFile function in goo/gfile.cc in Xpdf and Poppler 0.24.3 and earlier, when running on a system other than Unix, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.

nvd

← Previous8 / 9Next →