744 matches found
evince-cve-2017-1000083
This repository does not have a README...
CVE-2018-17961
build the image run the container with port forwarding ssh -X into it run evince executeonlybypass.ps check exploit has written into /.bashrc...
CVE-2026-46529
RCE via PDF argv injection CVE-2026-46529 atril/xreader/evince Working proof-of-concept for the argv injection in evspawn shell/ev-application.c. A single click anywhere on the rendered page of a crafted PDF triggers arbitrary code execution as the user running the viewer. This release uses the...
document-viewer-link-handler-security-assessment
CVE-2026-46529 - Atril Evince XReader PDF Clickable Link RCE Consultant-Style Cybersecurity Report Professional vulnerability assessment report for document viewer link-handler risk, including impact analysis, remediation, and mitigation strategy. 📍 Report Snapshot Field| Details ---|--- Report...
UBUNTU-CVE-2026-111132
GNOME libgxps through 0.3.2 contains a heap out-of-bounds read in pathgeometrystartelement that allows attackers to read past allocations via crafted PolyBezierSegment or PolyQuadraticBezierSegment Points attributes. Attackers can supply a point count not divisible by three or two in a crafted XP...
CVE-2026-111132
GNOME libgxps through 0.3.2 contains a heap out-of-bounds read in pathgeometrystartelement that allows attackers to read past allocations via crafted PolyBezierSegment or PolyQuadraticBezierSegment Points attributes. Attackers can supply a point count not divisible by three or two in a crafted XP...
Linux Distros Unpatched Vulnerability : CVE-2026-111132
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNOME libgxps through 0.3.2 contains a heap out-of-bounds read in pathgeometrystartelement that allows attackers to read past allocations via crafted...
CVE-2026-111132
GNOME libgxps through 0.3.2 contains a heap out-of-bounds read in pathgeometrystartelement that allows attackers to read past allocations via crafted PolyBezierSegment or PolyQuadraticBezierSegment Points attributes. Attackers can supply a point count not divisible by three or two in a crafted XP...
EUVD-2026-102259
GNOME libgxps through 0.3.2 contains a heap out-of-bounds read in pathgeometrystartelement that allows attackers to read past allocations via crafted PolyBezierSegment or PolyQuadraticBezierSegment Points attributes. Attackers can supply a point count not divisible by three or two in a crafted XP...
CVE-2026-111132 GNOME libgxps through 0.3.2 Heap Out-of-Bounds Read via path_geometry_start_element
GNOME libgxps through 0.3.2 contains a heap out-of-bounds read in pathgeometrystartelement that allows attackers to read past allocations via crafted PolyBezierSegment or PolyQuadraticBezierSegment Points attributes. Attackers can supply a point count not divisible by three or two in a crafted XP...
CVE-2026-111132
The GNOME libgxps library (through version 0.3.2 ) contains a heap out-of-bounds read vulnerability in the path_geometry_start_element() function. The root cause is triggered when processing a crafted XPS document containing PolyBezierSegment or PolyQuadraticBezierSegment Points attributes with a...
[SECURITY] Fedora 45 Update: evince-48.1-11.fc45
Evince is simple multi-page document viewer. It can display and print Portable Document Format PDF, PostScript PS and Encapsulated PostScript EPS files. When supported by the document format, evince allows searching for text, copying text to the clipboard, hypertext navigation, table-of-contents...
CLEANSTART-2024-SE84870 backend/comics/comics-document
Security vulnerability affects the evince package. backend/comics/comics-document...
CLEANSTART-2024-SB32943 tiff_document_render() and tiff_document_get_thumbnail() functions in the TIFF document backend in GNOME Evince through 3
Security vulnerability affects the evince package. The tiffdocumentrender and tiffdocumentgetthumbnail functions in the TIFF document backend in GNOME Evince through 3...
Rocky Linux 8 [CIQ] Security Update: evince / evince-browser-plugin / evince-browser-plugin-debuginfo / etc (crlsa-2026_28998)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202628998 advisory. atril: evince: xreader: PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen CVE-2026-46529 Tenable has extracted the preceding...
Rocky Linux 8 [CIQ] Security Update: gdk-pixbuf2 / gdk-pixbuf2-debuginfo / gdk-pixbuf2-debugsource / etc Multiple Vulnerabilities (crlsa-2019_3553)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20193553 advisory. evince: uninitialized memory use in function tiffdocumentrender and tiffdocumentgetthumbnail CVE-2019-11459 gvfs: improper authorization in...
Rocky Linux 9 [CIQ] Security Update: evince / evince-debuginfo / evince-debugsource / evince-libs / etc (crlsa-2026_27819)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202627819 advisory. atril: evince: xreader: PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen CVE-2026-46529 Tenable has extracted the preceding...
Security update for evince
This update for evince fixes the following issue: CVE-2026-63729: texlive: heap use-after-free in synctexparser.c via a malformed .synctex or .synctex.gz file bsc1272433. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zyppe...
Oracle Linux 7 : evince (ELSA-2026-41904)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-41904 advisory. 3.28.2-10.0.1 - Fix CVE-2026-46529 Orabug: 39757172 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Not...
