Approved changes feed: RSS · Atom

cpe:2.3:a:freedesktop:poppler:0.39.0:*:*:*:*:*:*:*

part: a version: 0.39.0 update: *

VendorFreedesktop (2c544e5d-e68e-5b35-a616-dc08f0ba697e)
ProductPoppler (b2e9eefd-0d12-5535-9c38-bc4de43f056e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libpoppler-dev purl2cpe 2026-06-01 10:14:03.992262
pkg:deb/ubuntu/libpoppler-dev purl2cpe 2026-06-01 10:14:03.992263
pkg:freedesktop/poppler/poppler purl2cpe 2026-06-01 10:14:03.992264
pkg:github/freedesktop/poppler purl2cpe 2026-06-01 10:14:03.992266
pkg:rpm/fedora/poppler purl2cpe 2026-06-01 10:14:03.992267
pkg:rpm/opensuse/poppler purl2cpe 2026-06-01 10:14:03.992268

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-7511 vulnerable 2026-06-03 14:37:32.322765 Details available
poppler since version 0.17.3 has been vulnerable to NULL pointer dereference in pdfunite triggered by specially crafted documents.
Published: 2017-05-30T18:00:00.000Z
Updated: 2024-08-05T16:04:11.847Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8868 vulnerable 2026-06-03 14:35:13.600781 Details available
Heap-based buffer overflow in the ExponentialFunction::ExponentialFunction function in Poppler before 0.40.0 allows remote attackers to cause a denial of service (memory corruption and crash) or possibly execute arbitrary code via an invalid blend mode in the ExtGState dictionary in a crafted PDF document.
Published: 2016-05-06T17:00:00.000Z
Updated: 2024-08-06T08:29:22.157Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.