Astra Linux – Vulnerability in poppler-22, poppler

In Poppler version 22.07.0, there is an assertion in the reachable Object::getString function that allows attackers to cause a denial of service due to a failure in the markObject function...

Astra Linux – Vulnerability in poppler-22

A vulnerability in Outline.cc for Poppler prior to version 23.06.0 allows a remote attacker to cause a Denial of Service DoS attack through a crafted PDF file using the OutlineItem::open method...

CVE-2025-50422

Poppler 25.04.0 版本之前 当 pdftocairo 渲染恶意 PDF 并在退出时调用 cairodebugresetstaticdata 时，包含 PDF 对象流的堆内存未被正确清除。具有本地访问权限的攻击者可以转储进程内存并恢复明文 PDF 内容（例如 /stream /endstream 块）。 具体的漏洞复现过程（漏洞原因.pdf）和 POC 文件（poppler-pdftocairo-poc）已附上。 供应商（freedesktop，Poppler 的维护者）已确认此问题并修复了该漏洞。修复程序已提交到其官方代码库。 以下是供应商提供的补丁/提交的公开链接：...

CVE-2025-50420

在 25.07.0 之前的 Poppler 版本中，其 pdfseparate 工具的 PDFDoc 处理逻辑存在一个漏洞：精心构造的 "/Annots" 字典自引用或相互引用，会导致 "PDFDoc::markAnnotations -- PDFDoc::markPageObjects -- PDFDoc::markObject -- PDFDoc::markDictionary" 中出现无限递归，因为循环检测使用的是字典指针地址，而每次 fetch 获取到的地址都不同。远程攻击者可以通过处理恶意 PDF 造成拒绝服务（应用程序挂起或崩溃）。 这里我构造了一个恶意...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: poppler (UTSA-2023-002394)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002394 advisory. An issue was discovered in Poppler 22.08.0. There is a reachable assertion in Object.h, will lead to denial of service because PDFDoc::replacePageDict in PDFDoc.cc...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: poppler (UTSA-2023-002396)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002396 advisory. An issue was discovered in Poppler 22.07.0. There is a reachable abort which leads to denial of service because the main function in pdfunite.cc lacks a stream check...

CVE-2026-85672

zerox 1.1.20 contains an OS command injection vulnerability in the file download mechanism where the temporary file extension derived from document URLs is interpolated unsanitized into shell commands executed by poppler utilities. Attackers can craft document URLs with malicious file extensions...

CVE-2026-85672 zerox 1.1.20 OS Command Injection via Document URL File Extension

zerox 1.1.20 contains an OS command injection vulnerability in the file download mechanism where the temporary file extension derived from document URLs is interpolated unsanitized into shell commands executed by poppler utilities. Attackers can craft document URLs with malicious file extensions...

EUVD-2026-71128

zerox 1.1.20 contains an OS command injection vulnerability in the file download mechanism where the temporary file extension derived from document URLs is interpolated unsanitized into shell commands executed by poppler utilities. Attackers can craft document URLs with malicious file extensions...

CVE-2026-85672

zerox 1.1.20 (getomni-ai) is affected by an OS command injection in its file download mechanism. The temporary file extension derived from document URLs is interpolated unsanitized into shell commands executed by poppler utilities. An attacker can craft a document URL with a malicious file extens...

PT-2026-85565

zerox 1.1.20 contains an OS command injection vulnerability in the file download mechanism where the temporary file extension derived from document URLs is interpolated unsanitized into shell commands executed by poppler utilities. Attackers can craft document URLs with malicious file extensions...

ROOT-OS-DEBIAN-12-CVE-2025-52886 CVE-2025-52886 in poppler - Patched by Root

Root has patched CVE-2025-52886 in the poppler package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-50420 CVE-2025-50420 in poppler - Patched by Root

Root has patched CVE-2025-50420 in the poppler package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2024-6239 CVE-2024-6239 in poppler - Patched by Root

Root has patched CVE-2024-6239 in the poppler package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2017-2818 CVE-2017-2818 in poppler - Patched by Root

Root has patched CVE-2017-2818 in the poppler package for Root:Debian:12. Multiple fixed versions available...

CVE-2026-12600

Denial-of-service DoS vulnerability in the internal JPEG2000 JPX decoding implementation of the Poppler fork developed by Innodata Labs. When an application processes an untrusted PDF file containing specially crafted JPXDecode images, a remote attacker can cause uncontrolled memory consumption...

EUVD-2026-65467

Denial-of-service DoS vulnerability in the internal JPEG2000 JPX decoding implementation of the Poppler fork developed by Innodata Labs. When an application processes an untrusted PDF file containing specially crafted JPXDecode images, a remote attacker can cause uncontrolled memory consumption...

CVE-2026-12600 Uncontrolled memory usage in Innodata Labs’ Poppler JPX decoder

Denial-of-service DoS vulnerability in the internal JPEG2000 JPX decoding implementation of the Poppler fork developed by Innodata Labs. When an application processes an untrusted PDF file containing specially crafted JPXDecode images, a remote attacker can cause uncontrolled memory consumption...

CVE-2026-12600 Uncontrolled memory usage in Innodata Labs’ Poppler JPX decoder

Denial-of-service DoS vulnerability in the internal JPEG2000 JPX decoding implementation of the Poppler fork developed by Innodata Labs. When an application processes an untrusted PDF file containing specially crafted JPXDecode images, a remote attacker can cause uncontrolled memory consumption...

CVE-2026-12600

CVE-2026-12600 is a denial-of-service vulnerability in the JPEG2000 (JPX) decoder within a Poppler fork maintained by Innodata Labs . The flaw resides in JPXStream::readCodestream(), where attacker-controlled values from the SIZ segment (e.g., img.nComps) are used to allocate memory for tiles and...