Lucene search
+L

3696 matches found

Vulnrichment
Vulnrichment
added 2025/07/02 3:46 p.m.4 views

CVE-2025-52886 Poppler Use After Free Vulnerability

Poppler is a PDF rendering library. Versions prior to 25.06.0 use std::atomicint for reference counting. Because std::atomicint is only 32 bits, it is possible to overflow the reference count and trigger a use-after-free. Version 25.06.0 patches the issue...

6.9CVSS7.4AI score0.00376EPSS
SaveExploits1References5
OSV
OSV
added 2025/07/02 3:46 p.m.6 views

CVE-2025-52886 Poppler Use After Free Vulnerability

Poppler is a PDF rendering library. Versions prior to 25.06.0 use std::atomicint for reference counting. Because std::atomicint is only 32 bits, it is possible to overflow the reference count and trigger a use-after-free. Version 25.06.0 patches the issue...

6.9CVSS8.4AI score
SaveExploits0References9
AlpineLinux
AlpineLinux
added 2025/07/02 3:46 p.m.15 views

CVE-2025-52886

Poppler is a PDF rendering library. Versions prior to 25.06.0 use std::atomicint for reference counting. Because std::atomicint is only 32 bits, it is possible to overflow the reference count and trigger a use-after-free. Version 25.06.0 patches the issue...

6.9CVSS7.5AI score0.00376EPSS
SaveExploits1References7
Cvelist
Cvelist
added 2025/07/02 3:46 p.m.22 views

CVE-2025-52886 Poppler Use After Free Vulnerability

Poppler is a PDF rendering library. Versions prior to 25.06.0 use std::atomicint for reference counting. Because std::atomicint is only 32 bits, it is possible to overflow the reference count and trigger a use-after-free. Version 25.06.0 patches the issue...

6.9CVSS0.00376EPSS
SaveExploits1References5
Debian CVE
Debian CVE
added 2025/07/02 3:46 p.m.20 views

CVE-2025-52886

Poppler is a PDF rendering library. Versions prior to 25.06.0 use std::atomicint for reference counting. Because std::atomicint is only 32 bits, it is possible to overflow the reference count and trigger a use-after-free. Version 25.06.0 patches the issue...

6.9CVSS6.9AI score0.00376EPSS
SaveExploits1
CNNVD
CNNVD
added 2025/07/02 12:00 a.m.15 views

Freedesktop Poppler 资源管理错误漏洞

Freedesktop Poppler is a Freedesktop community C++ class library for generating PDFs, which is inherited from Xpdf PDF reader. A resource management error vulnerability exists in Freedesktop Poppler versions prior to 25.06.0, which stems from a reference count overflow that could lead to reuse...

6.9CVSS8.4AI score0.00376EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2025/07/02 12:00 a.m.20 views

PT-2025-27644 · Poppler +3 · Poppler +3

Name of the Vulnerable Software and Affected Versions: Poppler versions prior to 25.06.0 Description: The issue is related to the use of std::atomic int for reference counting in the Poppler PDF rendering library. Since std::atomic int is only 32 bits, it is possible to overflow the reference...

6.9CVSS6.3AI score0.016EPSS
SaveExploits2References38
BDU FSTEC
BDU FSTEC
added 2025/06/19 12:00 a.m.14 views

The vulnerability in the JBIG2Bitmap::combine() function of the Poppler PDF file rendering library allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the JBIG2Bitmap::combine function in the Poppler PDF rendering library is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

4.3CVSS6.7AI score0.00638EPSS
SaveExploits1References14Affected Software8
AstraLinux
AstraLinux
added 2025/06/16 11:28 a.m.8 views

Astra Linux – Vulnerability in Poppler

A floating-point exception in the PSStack::roll function of Poppler before version 25.04.0 can cause an application to crash when handling malformed inputs associated with INTMIN...

5.5CVSS6.7AI score0.00251EPSS
SaveExploits1References3
AstraLinux
AstraLinux
added 2025/06/16 11:28 a.m.6 views

Astra Linux – Vulnerability in Poppler

In Poppler version 24.12.0, the libpoppler.so library contains a out-of-bounds read vulnerability within the JBIG2Stream.cc file’s JBIG2Bitmap::combine function...

4.3CVSS6.7AI score0.00638EPSS
SaveExploits1References3
AstraLinux
AstraLinux
added 2025/06/16 11:28 a.m.8 views

Astra Linux – Vulnerability in Poppler

Before version 25.04.0, crafted input files could cause out-of-bounds reads in the JBIG2Bitmap::combine function within JBIG2Stream.cc, due to an improperly placed isOk check...

7.1CVSS6.7AI score0.00234EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2025/06/16 12:00 a.m.3 views

TencentOS Server 3: poppler (TSSA-2023:0150)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2023:0150 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

7.8CVSS8.6AI score0.00627EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/06/16 12:00 a.m.7 views

TencentOS Server 4: poppler (TSSA-2024:1070)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:1070 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

7.5CVSS7.3AI score0.00785EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/06/16 12:00 a.m.5 views

TencentOS Server 3: poppler (TSSA-2024:0396)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0396 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

7.5CVSS7.3AI score0.00785EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/06/16 12:00 a.m.9 views

TencentOS Server 4: poppler (TSSA-2024:1071)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:1071 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

7.8CVSS7.8AI score0.75994EPSS
SaveExploits5References6
Tenable Nessus
Tenable Nessus
added 2025/06/16 12:00 a.m.5 views

TencentOS Server 3: poppler (TSSA-2024:0182)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0182 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

5.5CVSS6.5AI score0.00532EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/06/16 12:00 a.m.3 views

TencentOS Server 4: poppler (TSSA-2024:1130)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:1130 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

4.3CVSS6.4AI score0.00638EPSS
SaveExploits1References2
Redos
Redos
added 2025/06/16 12:00 a.m.6 views

ROS-20250616-02

A vulnerability in the Poppler PDF mapping library is related to boundary conditions in the function jbig2bitmap :: combine in jbig2stream.cc in libpppler.so. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to potentially sensitive information...

4.3CVSS5AI score0.00638EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2025/06/04 12:00 a.m.7 views

SUSE: Security Advisory (SUSE-SU-2025:1342-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.1CVSS5AI score0.00251EPSS
SaveExploits2References6
OpenVAS
OpenVAS
added 2025/06/04 12:00 a.m.6 views

SUSE: Security Advisory (SUSE-SU-2024:2334-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.00785EPSS
SaveExploits0References4
Rows per page
Query Builder