3704 matches found
CVE-2025-50422
Poppler antes de la versión 25.04.0 Cuando pdftocairo renderiza un PDF malicioso y llama a cairodebugresetstaticdata al finalizar, la memoria del heap que contiene los flujos de objetos del PDF no se limpia correctamente. Un atacante con acceso local puede volcar la memoria del proceso y recupera...
CVE-2025-50420
Poppler anterior a la versión 25.07.0 contiene una vulnerabilidad en la lógica de procesamiento de PDFDoc de la utilidad pdfseparate: diccionarios "/Annots" creados que se hacen referencia a sí mismos o entre sí provocan una recursión infinita en "PDFDoc::markAnnotations -- PDFDoc::markPageObject...
CVE-2026-85672
zerox 1.1.20 contains an OS command injection vulnerability in the file download mechanism where the temporary file extension derived from document URLs is interpolated unsanitized into shell commands executed by poppler utilities. Attackers can craft document URLs with malicious file extensions...
CVE-2026-85672 zerox 1.1.20 OS Command Injection via Document URL File Extension
zerox 1.1.20 contains an OS command injection vulnerability in the file download mechanism where the temporary file extension derived from document URLs is interpolated unsanitized into shell commands executed by poppler utilities. Attackers can craft document URLs with malicious file extensions...
EUVD-2026-71128
zerox 1.1.20 contains an OS command injection vulnerability in the file download mechanism where the temporary file extension derived from document URLs is interpolated unsanitized into shell commands executed by poppler utilities. Attackers can craft document URLs with malicious file extensions...
CVE-2026-85672
zerox 1.1.20 (getomni-ai) is affected by an OS command injection in its file download mechanism. The temporary file extension derived from document URLs is interpolated unsanitized into shell commands executed by poppler utilities. An attacker can craft a document URL with a malicious file extens...
PT-2026-85565
zerox 1.1.20 contains an OS command injection vulnerability in the file download mechanism where the temporary file extension derived from document URLs is interpolated unsanitized into shell commands executed by poppler utilities. Attackers can craft document URLs with malicious file extensions...
ROOT-OS-DEBIAN-12-CVE-2025-50420 CVE-2025-50420 in poppler - Patched by Root
Root has patched CVE-2025-50420 in the poppler package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2025-52886 CVE-2025-52886 in poppler - Patched by Root
Root has patched CVE-2025-52886 in the poppler package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2024-6239 CVE-2024-6239 in poppler - Patched by Root
Root has patched CVE-2024-6239 in the poppler package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2017-2818 CVE-2017-2818 in poppler - Patched by Root
Root has patched CVE-2017-2818 in the poppler package for Root:Debian:12. Multiple fixed versions available...
CVE-2026-12600
Denial-of-service DoS vulnerability in the internal JPEG2000 JPX decoding implementation of the Poppler fork developed by Innodata Labs. When an application processes an untrusted PDF file containing specially crafted JPXDecode images, a remote attacker can cause uncontrolled memory consumption...
EUVD-2026-65467
Denial-of-service DoS vulnerability in the internal JPEG2000 JPX decoding implementation of the Poppler fork developed by Innodata Labs. When an application processes an untrusted PDF file containing specially crafted JPXDecode images, a remote attacker can cause uncontrolled memory consumption...
CVE-2026-12600 Uncontrolled memory usage in Innodata Labs’ Poppler JPX decoder
Denial-of-service DoS vulnerability in the internal JPEG2000 JPX decoding implementation of the Poppler fork developed by Innodata Labs. When an application processes an untrusted PDF file containing specially crafted JPXDecode images, a remote attacker can cause uncontrolled memory consumption...
CVE-2026-12600 Uncontrolled memory usage in Innodata Labs’ Poppler JPX decoder
Denial-of-service DoS vulnerability in the internal JPEG2000 JPX decoding implementation of the Poppler fork developed by Innodata Labs. When an application processes an untrusted PDF file containing specially crafted JPXDecode images, a remote attacker can cause uncontrolled memory consumption...
CVE-2026-12600
CVE-2026-12600 is a denial-of-service vulnerability in the JPEG2000 (JPX) decoder within a Poppler fork maintained by Innodata Labs . The flaw resides in JPXStream::readCodestream(), where attacker-controlled values from the SIZ segment (e.g., img.nComps) are used to allocate memory for tiles and...
CVE-2026-78637
A vulnerability was detected in Fdawgs node-poppler up to 9.1.2/10.0.1. The impacted element is the function pdfInfo/pdfToText/pdfToCairo/pdfToPpm/pdfImages/pdfToHtml/pdfToPs/pdfFonts/pdfDetach/pdfAttach/pdfSeparate/pdfUnite of the file src/index.js of the component Argument Injection Handler...
CVE-2026-78637 Fdawgs node-poppler Argument Injection index.js pdfUnite argument injection
A vulnerability was detected in Fdawgs node-poppler up to 9.1.2/10.0.1. The impacted element is the function pdfInfo/pdfToText/pdfToCairo/pdfToPpm/pdfImages/pdfToHtml/pdfToPs/pdfFonts/pdfDetach/pdfAttach/pdfSeparate/pdfUnite of the file src/index.js of the component Argument Injection Handler...
CVE-2026-78637
CVE-2026-78637 is an argument injection vulnerability in Fdawgs node-poppler (versions up to 9.1.2/10.0.1 ), a Node.js wrapper for the Poppler PDF library. The flaw resides in the Argument Injection Handler within src/index.js, affecting multiple PDF conversion and manipulation functions includin...
CVE-2026-78637 Fdawgs node-poppler Argument Injection index.js pdfUnite argument injection
A vulnerability was detected in Fdawgs node-poppler up to 9.1.2/10.0.1. The impacted element is the function pdfInfo/pdfToText/pdfToCairo/pdfToPpm/pdfImages/pdfToHtml/pdfToPs/pdfFonts/pdfDetach/pdfAttach/pdfSeparate/pdfUnite of the file src/index.js of the component Argument Injection Handler...