4338 matches found
CVE-2025-50420
Poppler before version 25.07.0 contains a vulnerability in its pdfseparate utility's PDFDoc processing logic: crafted "/Annots" dictionaries that reference themselves or each other lead to infinite recursion in "PDFDoc::markAnnotations -- PDFDoc::markPageObjects -- PDFDoc::markObject --...
CVE-2025-50422
Poppler before version 25.04.0 When pdftocairo renders a malicious PDF and calls cairodebugresetstaticdata on exit, heap memory containing PDF object streams is not properly cleared. An attacker with local access can dump process memory and recover clear-text PDF content e.g., /stream /endstream...
OPENSUSE-SU-2026:22254-1 Security update for scribus
This update for scribus fixes the following issues: Changes in scribus: - Update to 1.6.7 Fixes CVE-2026-104061 / boo1289047 Fixes CVE-2026-104062 / boo1289046 Fixes CVE-2026-104063 / boo1289045 Fixes CVE-2026-104064 / boo1289044 Fixes CVE-2026-104065 / boo1289043 Fixes CVE-2026-104066 / boo12890...
CentOS Linux 7 [TuxCare] Security Update: poppler / poppler-cpp / poppler-cpp-devel / poppler-demos / etc (CENTOS7:CLSA-2026:1792785441)
The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1792785441 advisory. - A flaw was found in Poppler's Splash backend. A remote attacker could exploit this vulnerability by crafting a malicious PDF file that, when...
CLSA-2026-1792784815 poppler: Fix of CVE-2026-10118
CVE-2026-10118: fix integer overflow in SplashOutputDev::tilingPatternFill...
Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 : poppler vulnerability (USN-8950-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 host has packages installed that are affected by a vulnerability as referenced in the USN-8950-1 advisory. It was discovered that poppler incorrectly handled the password length limit when decrypting certain encrypted PDF files. An...
USN-8950-1: poppler vulnerability
It was discovered that poppler incorrectly handled the password length limit when decrypting certain encrypted PDF files. An attacker could possibly use this issue to cause a denial of service...
USN-8950-1 poppler vulnerability
It was discovered that poppler incorrectly handled the password length limit when decrypting certain encrypted PDF files. An attacker could possibly use this issue to cause a denial of service...
Security update for poppler
This update for poppler fixes the following issues: CVE-2026-93313: JBIG2 stream processing can cause integer overflows bsc1282532. CVE-2026-93314: TrueType font processing can cause integer overflows bsc1282531. CVE-2026-102620: Data corruption via integer overflow in FoFiTrueType:cvtSfnts...
Linux Distros Unpatched Vulnerability : CVE-2026-107705
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Poppler 0.42.0 through 26.10.0 contains a stack-based buffer overflow in Decrypt::revision6Hash that allows attackers controlling the password to overwrite stac...
ROS-20261021-73-0038
The vulnerability in poppler is related to integer overflow. Exploitation of this vulnerability can be carried out remotely...
CLSA-2026-1786352279 poppler: Fix of 2 CVEs
CVE-2025-50420: fix infinite recursion uncontrolled recursion, CWE-674 in pdfseparate via crafted /Annots dictionaries in PDFDoc::markAnnotations, leading to denial of service...
Astra Linux – vulnerability in poppler
A flaw was found in Poppler’s Splash backend. A remote attacker could exploit this vulnerability by crafting a malicious PDF file that, when rendered, triggers an integer overflow in the tilingPatternFill function. This overflow results in an undersized heap memory allocation, enabling a subseque...
Astra Linux – vulnerability in poppler
An issue was found in Poppler 0.71.0. There is a reachable abort in Object.h; this will result in a denial of service since EmbFile::save2 in FileSpec.cc fails to perform a stream check prior to saving an embedded file...
Astra Linux – Vulnerability in Poppler
A issue was discovered in Poppler through version 0.78.0. There is a divide-by-zero error in the function SplashOutputDev::tilingPatternFill in SplashOutputDev.cc...
Astra Linux – Vulnerability in Poppler
Uncontrolled recursion exists in pdfinfo and pdftops in poppler 0.89.0. This allows remote attackers to cause a denial of service through crafted inputs...
Astra Linux – Vulnerability in poppler, poppler-22
Poppler prior to and including version 22.08.0 contains an integer overflow in the JBIG2 decoder JBIG2Stream::readTextRegionSeg in JBIGStream.cc. Processing a specially crafted PDF file or JBIG2 image may lead to a crash or the execution of arbitrary code. This is similar to the vulnerability...
Astra Linux – vulnerability in poppler
A flaw was found in Poppler regarding how certain PDF files are converted to HTML. A remote attacker could exploit this flaw by providing a malicious PDF file; upon processing by the ‘pdftohtml’ program, it would cause the application to crash, resulting in a denial of service...
Astra Linux – Vulnerability in Poppler
A vulnerability was discovered in the freedesktop poppler version 20.12.1, allowing remote attackers to trigger a denial of service DoS attack through a crafted .pdf file, targeting the FoFiType1C::convertToType1 function...