320 matches found
CVE-2026-92413: NULL Pointer Dereference
A flaw has been found in Artifex MuPDF up to b6d17493700c621c0e70036980a6ebd06d2202c9. Affected by this vulnerability is the function pdfopenfilter of the file pdf-stream.c of the component PDF Xref Loading. Executing a manipulation can lead to null pointer dereference. The attack can be launched...
PT-2026-93875
Name of the Vulnerable Software and Affected Versions Artifex MuPDF versions prior to 3df1e30f9d7b77260e13bd0dbe1928ddeba8386e Description A remote flaw exists in the PDF Xref Loading component within the pdf open filter function of the pdf-stream.c file. A manipulation of this function can lead ...
Astra Linux – Vulnerability in poppler-22, poppler
In Poppler 22.07.0, the PDFDoc::savePageAs function in PDFDoc.c allows attackers to cause a denial-of-service attack the application crashes with SIGABRT by manipulating a PDF file in which the xref data structure is improperly handled during the getCatalog process. Note that this vulnerability i...
Security update for python-PyPDF2 (moderate)
openSUSE security update: security update for python-pypdf2 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21589-1 Rating: moderate References: bsc1271146 bsc1271147 Cross-References: CVE-2026-59936 CVE-2026-59937 Affected Products: openSUSE Leap...
CVE-2018-25306
PDFunite 0.41.0 contains a buffer overflow vulnerability that allows local attackers to crash the application by processing malformed PDF files during merge operations. Attackers can trigger a segmentation fault in the XRef::getEntry function within libpoppler by providing a specially crafted PDF...
CVE-2018-25306 PDFunite 0.41.0 Buffer Overflow via Malformed PDF
PDFunite 0.41.0 contains a buffer overflow vulnerability that allows local attackers to crash the application by processing malformed PDF files during merge operations. Attackers can trigger a segmentation fault in the XRef::getEntry function within libpoppler by providing a specially crafted PDF...
EUVD-2018-21827
PDFunite 0.41.0 contains a buffer overflow vulnerability that allows local attackers to crash the application by processing malformed PDF files during merge operations. Attackers can trigger a segmentation fault in the XRef::getEntry function within libpoppler by providing a specially crafted PDF...
CVE-2018-25306 PDFunite 0.41.0 Buffer Overflow via Malformed PDF
PDFunite 0.41.0 contains a buffer overflow vulnerability that allows local attackers to crash the application by processing malformed PDF files during merge operations. Attackers can trigger a segmentation fault in the XRef::getEntry function within libpoppler by providing a specially crafted PDF...
PDFunite security vulnerabilities
PDFunite is an open-source tool developed by poppler-utils, used for merging multiple PDF files into a single document. Version 0.41.0 of PDFunite contains a security vulnerability caused by a buffer overflow. This vulnerability could allow local attackers to cause the application to crash during...
CVE-2018-25306: Buffer Copy without Checking Size of Input
PDFunite 0.41.0 contains a buffer overflow vulnerability that allows local attackers to crash the application by processing malformed PDF files during merge operations. Attackers can trigger a segmentation fault in the XRef::getEntry function within libpoppler by providing a specially crafted PDF...
OSV-2026-599 UNKNOWN READ in XRef::parseEntry
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=504271260 Crash type: UNKNOWN READ Crash state: XRef::parseEntry XRef::getEntry Parser::makeStream...
PT-2026-61849
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=504271260 Crash type: UNKNOWN READ Crash state: XRef::parseEntry XRef::getEntry Parser::makeStream...
poppler:qt_annot_fuzzer: Crash in XRef::parseEntry
Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed Report: https://oss-fuzz.com/testcase?key=4749375531450368 Project: poppler Fuzzing Engine: afl Fuzz Target:...
OSV-2026-461 UNKNOWN READ in XRef::constructObjectEntry
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=495914144 Crash type: UNKNOWN READ Crash state: XRef::constructObjectEntry XRef::constructXRef XRef::XRef...
PT-2026-30401
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=495914144 Crash type: UNKNOWN READ Crash state: XRef::constructObjectEntry XRef::constructXRef XRef::XRef...
poppler:page_label_fuzzer: Crash in XRef::constructObjectEntry
Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed Report: https://oss-fuzz.com/testcase?key=6170489147162624 Project: poppler Fuzzing Engine: honggfuzz Fuzz Target:...
poppler:qt_label_fuzzer: Use-of-uninitialized-value in XRef::readXRef
Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed Report: https://oss-fuzz.com/testcase?key=6444791933239296 Project: poppler Fuzzing Engine: libFuzzer Fuzz Target:...
EUVD-2019-6935
Malware in sbrugna...