Lucene search
+L

100 matches found

Cvelist
Cvelist
•added 2026/06/01 3:33 p.m.•77 views

CVE-2026-10118 Poppler: integer overflow in poppler splashoutputdev::tilingpatternfill leads to heap buffer overflow via unchecked dimension multiplication

A flaw was found in Poppler's Splash backend. A remote attacker could exploit this vulnerability by crafting a malicious PDF file that, when rendered, triggers an integer overflow in the tilingPatternFill function. This overflow leads to an undersized heap memory allocation, allowing a subsequent...

7.8CVSS0.00252EPSS
SaveExploits0References21
CVE
CVE
•added 2026/06/01 3:33 p.m.•149 views

CVE-2026-10118

CVE-2026-10118 – Poppler Splash backend integer overflow : The vulnerability affects Poppler’s Splash backend, in the tilingPatternFill path, where crafted PDFs can trigger an integer overflow that yields an undersized heap allocation, enabling an out-of-bounds write. This can lead to arbitrary c...

7.8CVSS7.6AI score0.00252EPSS
SaveExploits0References22
attackerkb
attackerkb
•added 2026/06/01 3:33 p.m.•16 views

CVE-2026-10118

A flaw was found in Poppler's Splash backend. A remote attacker could exploit this vulnerability by crafting a malicious PDF file that, when rendered, triggers an integer overflow in the tilingPatternFill function. This overflow leads to an undersized heap memory allocation, allowing a subsequent...

7.8CVSS7.6AI score0.00252EPSS
SaveExploits0References21
Debian CVE
Debian CVE
•added 2026/06/01 3:33 p.m.•37 views

CVE-2026-10118

A flaw was found in Poppler's Splash backend. A remote attacker could exploit this vulnerability by crafting a malicious PDF file that, when rendered, triggers an integer overflow in the tilingPatternFill function. This overflow leads to an undersized heap memory allocation, allowing a subsequent...

7.8CVSS7.6AI score0.00252EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/06/01 3:29 p.m.•20 views

CVE-2026-10118

A flaw was found in Poppler's Splash backend. A remote attacker could exploit this vulnerability by crafting a malicious PDF file that, when rendered, triggers an integer overflow in the tilingPatternFill function. This overflow leads to an undersized heap memory allocation, allowing a subsequent...

7.8CVSS7.6AI score0.00252EPSS
SaveExploits0References4
Snyk
Snyk
•added 2026/06/01 3:25 p.m.•38 views

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the tilingPatternFill function. An attacker can execute arbitrary code, disclose sensitive information, or cause a denial of service by supplying a specially crafted PDF file to an application that...

8.4CVSS7.4AI score0.00252EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/01 12:00 a.m.•28 views

PT-2026-45444

Name of the Vulnerable Software and Affected Versions Poppler affected versions not specified Description A flaw in the Splash backend allows a remote attacker to trigger an integer overflow in the tilingPatternFill function by using a specially crafted PDF file. This overflow causes an undersize...

7.8CVSS7.7AI score0.00252EPSS
SaveExploits0References73
CNNVD
CNNVD
•added 2026/06/01 12:00 a.m.•23 views

Poppler 数字错误漏洞

Poppler is an open-source PDF rendering library developed by Poppler. Poppler has a vulnerability related to input validation errors. This vulnerability stems from an integer overflow in the tilingPatternFill function within the Splash backend. As a result of this overflow, insufficient heap memo...

7.8CVSS7.6AI score0.00252EPSS
SaveExploits0References13
FreeBSD
FreeBSD
•added 2026/06/01 12:00 a.m.•30 views

Poppler: integer overflow in tilingPatternFill

https://access.redhat.com/errata/RHSA-2026:24984 reports: A flaw was found in Poppler's Splash backend. A remote attacker could exploit this vulnerability by crafting a malicious PDF file that, when rendered, triggers an integer overflow in the tilingPatternFill function. This overflow leads to a...

7.8CVSS7.5AI score0.00252EPSS
SaveExploits0References1
OSS-Fuzz
OSS-Fuzz
•added 2024/07/24 1:57 a.m.•10 views

poppler:pdf_fuzzer: Use-of-uninitialized-value in Splash::clear

Detailed Report: https://oss-fuzz.com/testcase?key=5583095026221056 Project: poppler Fuzzing Engine: libFuzzer Fuzz Target: pdffuzzer Job Type: libfuzzermsanpoppler Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: Splash::clear SplashOutputDev::tilingPatternFi...

5.9AI score
SaveExploits0
SUSE CVE
SUSE CVE
•added 2023/02/15 4:09 a.m.•11 views

SUSE CVE-2019-14494

An issue was discovered in Poppler through 0.78.0. There is a divide-by-zero error in the function SplashOutputDev::tilingPatternFill at SplashOutputDev.cc...

5.3CVSS9.5AI score0.02679EPSS
SaveExploits1References7
RedHat Linux
RedHat Linux
•added 2020/11/04 1:25 a.m.•13 views

poppler: divide-by-zero in function SplashOutputDev::tilingPatternFill in SplashOutputDev.cc

A divide-by-zero error was found in the way Poppler handled certain PDF files. A remote attacker could exploit this flaw by providing a malicious PDF file that, when processed by an application linked to Poppler, would crash the application causing a denial of service...

7.5CVSS5.8AI score0.02679EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2020/09/29 7:37 p.m.•18 views

poppler: divide-by-zero in function SplashOutputDev::tilingPatternFill in SplashOutputDev.cc

A divide-by-zero error was found in the way Poppler handled certain PDF files. A remote attacker could exploit this flaw by providing a malicious PDF file that, when processed by an application linked to Poppler, would crash the application causing a denial of service...

7.5CVSS5.8AI score0.02679EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
•added 2020/05/29 12:00 a.m.•14 views

The vulnerability of the SplashOutputDev::tilingPatternFill function (SplashOutputDev.cc), a library for displaying PDF files in Poppler, allows a hacker to trigger a service failure.

The vulnerability of the SplashOutputDev::tilingPatternFill function SplashOutputDev.cc, which is part of the Poppler PDF rendering library, is related to division by zero errors. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

7.5CVSS6.8AI score0.02679EPSS
SaveExploits1References19Affected Software8
CNVD
CNVD
•added 2019/08/02 12:00 a.m.•14 views

Poppler De-Zero Error Vulnerability

Poppler is based on xpdf-3.0 code base PDF rendering library. A divide-by-zero error vulnerability exists in the SplashOutputDev::tilingPatternFill function in SplashOutputDev.cc in Poppler 0.78.0 and earlier versions, which can be exploited by an attacker to cause a denial of service...

7.5CVSS8.4AI score0.02679EPSS
SaveExploits1References1
OSV
OSV
•added 2019/08/01 5:15 p.m.•4 views

DEBIAN-CVE-2019-14494

An issue was discovered in Poppler through 0.78.0. There is a divide-by-zero error in the function SplashOutputDev::tilingPatternFill at SplashOutputDev.cc...

7.5CVSS6.8AI score0.02679EPSS
SaveExploits1References1
OSV
OSV
•added 2019/08/01 5:15 p.m.•14 views

AZL-44472 CVE-2019-14494 affecting package cppcheck for versions less than 2.18.3-1

An issue was discovered in Poppler through 0.78.0. There is a divide-by-zero error in the function SplashOutputDev::tilingPatternFill at SplashOutputDev.cc...

7.5CVSS6.7AI score0.02679EPSS
SaveExploits1References1
Snyk
Snyk
•added 2019/08/01 5:15 p.m.•7 views

Divide By Zero

Overview Affected versions of this package are vulnerable to Divide By Zero. An issue was discovered in Poppler through 0.78.0. There is a divide-by-zero error in the function SplashOutputDev::tilingPatternFill at SplashOutputDev.cc. Details Denial of Service DoS describes a family of attacks, al...

7.5CVSS7.1AI score0.02679EPSS
SaveExploits1References2
OSV
OSV
•added 2019/08/01 12:00 a.m.•15 views

UBUNTU-CVE-2019-14494

An issue was discovered in Poppler through 0.78.0. There is a divide-by-zero error in the function SplashOutputDev::tilingPatternFill at SplashOutputDev.cc...

7.5CVSS6.8AI score0.02679EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2019/07/11 12:00 a.m.•10 views

PT-2019-5324 · Poppler +6 · Poppler +6

Name of the Vulnerable Software and Affected Versions: Poppler versions through 0.78.0 Description: The issue is related to a divide-by-zero error in the SplashOutputDev::tilingPatternFill function at SplashOutputDev.cc. This error can be exploited by a remote attacker to cause a denial of servic...

9.8CVSS6.3AI score0.03518EPSS
SaveExploits20References190
Rows per page
Query Builder