CVE-2025-50422

Poppler prima della versione 25.04.0 Quando pdftocairo renderizza un PDF dannoso e chiama cairodebugresetstaticdata all'uscita, la memoria heap contenente i flussi di oggetti PDF non viene cancellata correttamente. Un attaccante con accesso locale può scaricare la memoria di processo e recuperare...

ROS-20250910-03

Vulnerability of Poppler PDF rendering library is related to lack of object threads cleanup PDF when cairodebugresetstaticdata is called. Exploitation of the vulnerability could allow an attacker to gain access to confidential information...

ROS-20250910-02

A vulnerability in the Hints::Hints poppler/Hints.cc function of the Poppler PDF display library is related to a resource release error. with resource release errors. Exploitation of the vulnerability allows an attacker acting remotely, to cause a denial of service using a specially crafted PDF...