CVE-2021-30860

CVE-2021-30860 affects Apple CoreGraphics in macOS/iOS/watchOS/tvOS stack. A vulnerability in integer overflow during processing of maliciously crafted PDFs could lead to arbitrary code execution. Fixed in Security Update 2021-005 for Catalina, iOS 14.8 / iPadOS 14.8, macOS Big Sur 11.6, and watc...

CVE-2020-36024

CVE-2020-36024 affects freedesktop poppler, specifically version 20.12.1, where a NULL pointer dereference in FoFiType1C::convertToType1 can be exploited via a crafted PDF to trigger denial of service. The connected sources (MiracleLinux, Unity Linux, Debian, Rocky Linux, etc.) cite this vulnerab...

CVE-2022-38171

CVE-2022-38171 describes an integer overflow in the JBIG2 decoder of Xpdf (JBIG2Stream::readTextRegionSeg in JBIG2Stream.cc) that can crash or allow arbitrary code execution when processing a crafted PDF or JBIG2 image. Publicly documented impact aligns with prior CVEs (e.g., CVE-2021-30860) and ...

CVE-2022-37051

Poppler 22.07.0 contains a denial-of-service issue (CVE-2022-37051) in the pdfunite tool due to a missing stream check before saving an embedded file in pdfunite.cc. Connected sources confirm the vulnerability and note that Debian's DLA-4141 advisory fixes this in Poppler via upgrade to 20.09.0-3...

CVE-2022-37050

CVE-2022-37050 affects Poppler 22.07.0 and is a crash/DoS in PDFDoc::savePageAs (PDFDoc.c) caused by mishandling the xref data structure during getCatalog processing; it is described as stemming from an incomplete patch to CVE-2018-20662. Connected sources confirm this CVE and show multiple advis...

CVE-2020-23804

CVE-2020-23804 affects the poppler PDF rendering library (pdfinfo/pdfops) with an uncontrolled recursion/stack overflow in the XRef::readXRefTable path, enabling a remote attacker to cause denial of service via crafted PDFs. The issue is present in Poppler 0.89.0 and related lines of the release ...

CVE-2022-38349

CVE-2022-38349 affects Poppler 22.08.0. The issue is a reachable assertion in Object.h, leading to a denial of service because PDFDoc::replacePageDict in PDFDoc.cc lacks a stream check before saving an embedded file. Public references indicate Debian/Ubuntu advisories patch this in respective rel...

CVE-2019-14494

Poppler vulnerability CVE-2019-14494 is a divide-by-zero in SplashOutputDev::tilingPatternFill (Poppler up to 0.78.0). The issue affects Poppler-based rendering and can enable denial of service when processing malicious PDFs. Connected advisories (ALAS, Debian LTS, AlmaLinux, CentOS/RHEL, etc.) i...

CVE-2025-32364

Poppler before 25.04.0 is affected by CVE-2025-32364 due to a floating-point exception in PSStack::roll, which may crash applications when handling malformed inputs involving INT_MIN. Upstream remediation is to upgrade to 25.04.0 or newer; multiple distributions have issued fixes (e.g., Mageia, F...

CVE-2019-12293

CVE-2019-12293 concerns Poppler up to 0.76.1, where JPXStream::init in JPEG2000Stream.cc can cause a heap-based buffer over-read when processing data with inconsistent heights or widths. This affects many distributions (as shown by multiple advisories) and can lead to crashes or unstable behavior...

CVE-2025-32365

Affected software: Poppler (PDF rendering library). Vulnerability: CVE-2025-32365 allows an out-of-bounds read in JBIG2Bitmap::combine within JBIG2Stream.cc due to a misplaced isOk check. Impact (per sources): high confidentiality impact and high availability impact; attack vector LOCAL, user int...

CVE-2017-9776

Poppler (pdftocairo) contains an integer overflow in JBIG2Stream.cc that can cause a heap-based buffer overflow, enabling DoS or potentially other impact via crafted PDFs. Public advisories (Debian DSA-4079-1/2, CentOS/RHEL RHSA-2550/2551, Mageia MGASA-2017-0276, AWS ALAS-2017-902) show this CVE ...

CVE-2024-56378

CVE-2024-56378 is an out-of-bounds read in the Poppler library (libpoppler.so) affecting releases up to 24.12.0, due to a flaw in JBIG2Bitmap::combine in JBIG2Stream.cc. Connected sources confirm the issue in Poppler and note public fixes in at least Debian LTS (DLA-4141-1) for Debian 11, where v...

CVE-2025-43903

Summary: CVE-2025-43903 affects Poppler NSSCryptoSignBackend.cc before 25.04.0, which does not verify adbe.pkcs7.sha1 signatures in PDF documents, enabling potential signature forgeries. What is affected: Poppler (NSSCryptoSignBackend.cc) in versions prior to 25.04.0. The vulnerability is describ...

CVE-2019-9631

CVE-2019-9631 affects Poppler 0.74.0, with a heap-based buffer over-read in CairoRescaleBox.cc downsample_row_box_filter. The vulnerability is disclosed across multiple advisories (e.g., MiracleLinux AXSA-2019-4277, SUSE/SUSE-SU advisories, Oracle Linux ELSA-2019-2022) and is tracked in CVE-2019-...

CVE-2020-36023

CVE-2020-36023 affects freedesktop poppler 20.12.1. The issue is an infinite loop in FoFiType1C::cvtGlyph, enabling denial of service via crafted PDFs. Connected advisories confirm the flaw across multiple distros and reference fixes/patch notes: Debian LTS advisory DLA-4141 notes a security upda...

CVE-2018-20662

CVE-2018-20662 relates to Poppler 0.72.0, where PDFDoc::setup can crash the app (SIGABRT) due to a wrong return value while processing extracted PDF subtypes, enabling DoS via a crafted xref structure. Connected advisories note an ongoing issue in Poppler 22.07.0: PDFDoc::savePageAs can cause a d...

CVE-2019-9200

CVE-2019-9200: A heap-based buffer underwrite in ImageStream::getLine() (Stream.cc) in Poppler 0.74.0 can be triggered by a crafted PDF sent to pdfimages, leading to Denial of Service (segmentation fault) or possibly other impact. Connected advisories enumerate the issue across affected packages,...

CVE-2022-38784

Poppler up to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg). Processing a crafted PDF or JBIG2 image could crash or allow arbitrary code execution. This issue is the same class as CVE-2022-38171 in Xpdf. Connected advisories (ALAS/ALSA, A...

CVE-2018-18897

CVE-2018-18897 refers to a memory leak in Poppler 0.71.0’s GfxColorSpace::setDisplayProfile (GfxState.cc), demonstrated by pdftocairo. The issue is documented across multiple advisories in the connected documents, confirming the component (Poppler), vulnerable function, and affected version. The ...

CVE-2019-9959

CVE-2019-9959 affects Poppler (PDF rendering library); the root cause is an integer overflow in JPXStream::init due to not checking negative stream length, enabling allocation of a large heap memory chunk controlled by an attacker. Affected versions include Poppler 0.78.0 and earlier. Connected a...

CVE-2020-27778

CVE-2020-27778 = flaw in Poppler's pdftohtml when converting certain PDFs to HTML that could be exploited remotely to crash the application (DoS). Connected docs confirm affected Poppler/pdftohtml use and DoS impact; no explicit fixed version is provided in the supplied materials. Remediation: ap...

CVE-2022-37052

CVE-2022-37052 affects Poppler (PDF rendering) with a reachable Object::getString assertion in version 22.07.0, allowing denial of service via a failure in markObject. Connected sources indicate multiple advisories (Debian DLA-4141, Nessus/RHEL advisories) acknowledge this as part of a family of ...

CVE-2018-10768

CVE-2018-10768 describes a NULL pointer dereference in Poppler’s AnnotPath::getCoordsLength (Annot.h) affecting Ubuntu’s Poppler 0.24.5. A crafted input can cause a remote denial of service. Multiple connected advisories note that later Poppler versions (e.g., 0.41.0) are not affected. Related do...

CVE-2018-13988

CVE-2018-13988 affects Poppler up to version 0.62, describing an out-of-bounds read due to an incorrect memory access not mapped in the process’s memory space, demonstrable via pdfunite. The vulnerability can lead to memory corruption and denial of service when a user opens a specially crafted PD...

CVE-2018-21009

CVE-2018-21009 affects Poppler up to version 0.66.0, caused by an integer overflow in Parser::makeStream (Parser.cc). Connected advisories confirm this issue across several distributions; impact involves memory corruption with potential exploitation paths not detailed in these docs. Remediation p...

CVE-2019-10871

Poppler 0.74.0 contains a heap-based buffer over-read in PSOutputDev::checkPageSlice (PSOutputDev.cc), identified as CVE-2019-10871. The issue is documented across multiple advisories (SUSE/OpenSUSE, EulerOS, etc.) as a vulnerability in Poppler, with no additional exploit details provided in the ...

CVE-2022-27337

CVE-2022-27337 describes a logic error in Poppler (v22.03.0) within the Hints::Hints function that can cause a Denial of Service when parsing a crafted PDF. The issue is a vulnerability in the PDF rendering library’s handling, not a user-triggered component, with the DoS impact noted in the publi...

CVE-2019-7310

CVE-2019-7310 is a heap-based buffer over-read in Poppler 0.73.0’s XRef::getEntry (XRef.cc) that can be triggered by a crafted PDF document, potentially causing a denial of service (application crash) and possibly other impact (as demonstrated by pdftocairo). Affected products in multiple advisor...

CVE-2017-18267

The CVE-2017-18267 entry affects Poppler (FoFiType1C::cvtGlyph in FoFiType1C.cc) and describes a vulnerability in which a crafted PDF can trigger an infinite recursion, causing a denial of service (via pdftops). The issue is in Poppler up to version 0.64.0, with exploitation demonstrated by proce...

CVE-2018-20650

CVE-2018-20650 is described in connected documentation as a vulnerability in Poppler 0.72.0 where a reachable Object::dictLookup assertion in FileSpec.cc (pdfdetach) can be exploited to cause a denial of service due to lack of a type check for dict data. The MiracleLinux AXSA advisory lists this ...

CVE-2018-20481

Poppler 0.72.0 contains a vulnerability in XRef::getEntry where unallocated XRef entries can cause a NULL pointer dereference and denial of service when XRefEntry::setFlag is invoked from Parser::makeStream in Parser.cc, exploitable via a crafted PDF. Connected advisories (Ubuntu USN-3865-1, SUSE...

CVE-2020-35702

The CVE-2020-35702 entry corresponds to a heap-based buffer overflow in Poppler’s DCTStream::getChars (DCTStream.cc) when processing crafted PDFs. Affected release per public advisories is Poppler 20.12.1, with Arch Linux ASA noting arbitrary code execution is possible and that upstream fixed the...

CVE-2019-10872

CVE-2019-10872 : Poppler 0.74.0 contains a heap-based buffer over-read in Splash::blitTransparent (splash/Splash.cc). Documented in multiple advisories (e.g., SUSE/OpenSUSE updates referencing this CVE) as fixed in patched releases; remediation typically involves applying the vendor advisory patc...

CVE-2010-3702

The CVE-2010-3702 issue affects the Xpdf PDF parser (Gfx::getPos) in Xpdf

CVE-2018-20551

CVE-2018-20551 affects Poppler, specifically an exploit in AnnotRichMedia in Annot.c (Poppler 0.72.0) where a reachable Object::getString assertion can be triggered by crafted rich-media annotations, enabling denial of service. The issue is echoed across multiple security advisories (Ubuntu USN-3...

CVE-2018-16646

CVE-2018-16646 affects Poppler, where in version 0.68.0 the Parser::getObj() function in Parser.cc may trigger infinite recursion via a crafted file, enabling remote DoS. Public disclosures in connected advisories confirm the issue and link it to Poppler-based components. Remediation actions acro...

CVE-2024-6239

Poppler vulnerability CVE-2024-6239 affects the Pdfinfo utility. The issue triggers a crash (denial of service) when processing malformed input with the -dests parameter. Public advisories group this under Poppler/pdfinfo crash in broken documents, with a base CVSS around 7.5 (HIGH) and network a...

CVE-2019-9903

CVE-2019-9903 is a Poppler vulnerability affecting PDFDoc::markObject in PDFDoc.cc (Poppler 0.74.0). The issue causes stack consumption via a crafted PDF, exploitable when processing with pdfunite. Connected advisories reference the same root cause and list multiple vendor updates fixing this fam...

CVE-2018-19058

The connected documents corroborate CVE-2018-19058 as a Poppler 0.71.0 issue: a reachable abort in Object.h caused by EmbFile::save2 lacking a stream check leads to denial of service. Additional CVEs in the same Poppler set are cited across multiple advisories (CVE-2018-19059, CVE-2018-19060, CVE...

CVE-2017-9775

CVE-2017-9775 affects Poppler (pdftocairo) with a stack-based buffer overflow in GfxState.cc; impacts include application crash and potential code execution when processing crafted PDFs. The issue is documented across multiple advisories, with mitigations naming upgrades to Poppler 0.56+ (and lat...

CVE-2015-8868

CVE-2015-8868 affects Poppler up to version 0.40.0, where a heap-based buffer overflow in ExponentialFunction::ExponentialFunction can be triggered by a crafted PDF ExtGState dictionary, leading to memory corruption, a crash, or potentially arbitrary code execution. Mitigation: upgrade Poppler to...

CVE-2017-9865

CVE-2017-9865 : In Poppler 0.54.0, the function GfxImageColorMap::getGray in GfxState.cc can trigger a denial of service via a crafted PDF, due to missing color-map validation in ImageOutputDev.cc. The issue enables a stack-based buffer over-read that can crash the application. The vulnerability ...

CVE-2017-1000456

CVE-2017-1000456 affects freedesktop.org libpoppler 0.60.1 . The issue is a lack of proper boundary validation in TextPool::addWord, causing an overflow in subsequent calculations. This is the concrete vulnerability described in the initial record, and is echoed by multiple Nessus/OSINT entries r...

CVE-2017-14518

CVE-2017-14518 affects Poppler 0.59.0 where a crafted PDF can trigger a floating point exception in isImageInterpolationRequired() (Splash.cc). Connected sources confirm the issue and indicate remediation patches in distributions (e.g., openSUSE openSUSE-2018-648) that address this CVE by updatin...

CVE-2007-3387

CVE-2007-3387 affects xpdf 3.02 and thus downstream KDE/kpdf/gpdf/pdfs handling in kdegraphics, CUPS, and related tools. The root cause is an integer/stack-based overflow in PDF parsing: StreamPredictor::getNextLine may overflow when processing a crafted PDF, potentially allowing remote code exec...

CVE-2017-14519

CVE-2017-14519 affects Poppler 0.59.0. A memory corruption occurs in Object::streamGetChar in Object.h after a long sequence of Gfx calls (Gfx::display, Gfx::go, Gfx::execOp, Gfx::opShowText, Gfx::doShowText) that forms an infinite loop in Gfx.cc. The connected sources confirm the vulnerable path...

CVE-2018-19149

CVE-2018-19149 is a NULL pointer dereference in Poppler prior to 0.70.0, triggered when _poppler_attachment_new is called from poppler_annot_file_attachment_get_attachment. Affected products are Poppler up to version before 0.70.0; the issue is associated with a denial of service impact due to a ...

CVE-2018-19059

CVE-2018-19059 is an out‑of‑bounds read issue in Poppler 0.71.0 related to EmbFile::save2 in FileSpec.cc, which can lead to denial of service. The vulnerability is demonstrated by an embedded file save path that is not validated (pdfdetach.cc). The connected Nessus/NVL descriptors enumerate Poppl...

CVE-2018-19060

CVE-2018-19060 is reported in Poppler 0.71.0 as a NULL pointer dereference in goo/GooString.h that leads to denial of service when pdfdetach does not validate an embedded file’s filename before saving. Connected advisories enumerate Poppler-related issues across multiple vendors (e.g., MiracleLin...