Approved changes feed: RSS · Atom
cpe:2.3:a:freedesktop:poppler:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Freedesktop (2c544e5d-e68e-5b35-a616-dc08f0ba697e) |
|---|---|
| Product | Poppler (b2e9eefd-0d12-5535-9c38-bc4de43f056e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/libpoppler-dev |
purl2cpe | 2026-06-01 10:14:03.991328 |
pkg:deb/ubuntu/libpoppler-dev |
purl2cpe | 2026-06-01 10:14:03.991331 |
pkg:freedesktop/poppler/poppler |
purl2cpe | 2026-06-01 10:14:03.991334 |
pkg:github/freedesktop/poppler |
purl2cpe | 2026-06-01 10:14:03.991337 |
pkg:rpm/fedora/poppler |
purl2cpe | 2026-06-01 10:14:03.991339 |
pkg:rpm/opensuse/poppler |
purl2cpe | 2026-06-01 10:14:03.991342 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-52886 |
vulnerable | 2026-06-08 07:31:13.141286 |
Poppler Use After Free Vulnerability
Poppler is a PDF rendering library. Versions prior to 25.06.0 use `std::atomic_int` for reference counting. Because `std::atomic_int` is only 32 bits, it is possible to overflow the reference count and trigger a use-after-free. Version 25.06.0 patches the issue.
Published: 2025-07-02T15:46:49.733Z
Updated: 2025-11-04T22:06:42.737Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-50420 |
vulnerable | 2026-06-08 07:31:10.924005 |
Details available
An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).
Published: 2025-08-04T00:00:00.000Z
Updated: 2026-07-05T16:07:46.288Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-43903 |
vulnerable | 2026-06-08 07:25:10.451230 |
Details available
MEDIUM (4.3)
NSSCryptoSignBackend.cc in Poppler before 25.04.0 does not verify the adbe.pkcs7.sha1 signatures on documents, resulting in potential signature forgeries.
Published: 2025-04-18T00:00:00.000Z
Updated: 2025-04-21T02:51:02.614Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-43718 |
vulnerable | 2026-06-08 07:25:09.307405 |
Details available
LOW (2.9)
Poppler 24.06.1 through 25.x before 25.04.0 allows stack consumption and a SIGSEGV via deeply nested structures within the metadata (such as GTS_PDFEVersion) of a PDF document, e.g., a regular expression for a long pdfsubver string. This occurs in Dict::lookup, Catalog::getMetadata, and associated functions in PDFDoc, with deep recursion in the regex executor (std::__detail::_Executor).
Published: 2025-10-01T00:00:00.000Z
Updated: 2025-10-06T17:41:43.699Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-32365 |
vulnerable | 2026-06-08 07:18:59.493535 |
Details available
MEDIUM (4)
Poppler before 25.04.0 allows crafted input files to trigger out-of-bounds reads in the JBIG2Bitmap::combine function in JBIG2Stream.cc because of a misplaced isOk check.
Published: 2025-04-05T00:00:00.000Z
Updated: 2025-11-03T19:53:23.763Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-32364 |
vulnerable | 2026-06-08 07:18:59.493165 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6239 |
vulnerable | 2026-06-08 06:58:18.346119 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-56378 |
vulnerable | 2026-06-08 06:54:17.799199 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34872 |
vulnerable | 2026-06-08 06:06:26.220693 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38784 |
vulnerable | 2026-06-08 05:47:17.336647 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38171 |
vulnerable | 2026-06-08 05:47:15.926523 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-30860 |
vulnerable | 2026-06-08 05:31:51.745795 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-27778 |
vulnerable | 2026-06-08 05:23:53.165278 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9959 |
vulnerable | 2026-06-08 05:14:26.721070 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14494 |
vulnerable | 2026-06-08 05:12:54.914587 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-12293 |
vulnerable | 2026-06-08 05:12:38.895847 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-21009 |
vulnerable | 2026-06-08 05:11:28.320424 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-19149 |
vulnerable | 2026-06-08 05:11:15.401873 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-13988 |
vulnerable | 2026-06-08 05:10:52.481824 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-10768 |
vulnerable | 2026-06-08 05:10:37.078842 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-9776 |
vulnerable | 2026-06-08 05:10:10.508228 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-9775 |
vulnerable | 2026-06-08 05:10:10.507193 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7515 |
vulnerable | 2026-06-08 05:09:56.368843 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-18267 |
vulnerable | 2026-06-08 05:09:10.655595 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-7296 |
vulnerable | 2026-06-08 05:05:09.477768 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4474 |
vulnerable | 2026-06-08 05:04:47.216998 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4473 |
vulnerable | 2026-06-08 05:04:47.153074 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4472 |
vulnerable | 2026-06-08 05:04:47.150229 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1790 |
vulnerable | 2026-06-08 05:03:56.378778 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1789 |
vulnerable | 2026-06-08 05:03:56.378357 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1788 |
vulnerable | 2026-06-08 05:03:56.377827 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2142 |
vulnerable | 2026-06-08 05:00:52.978694 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-5110 |
vulnerable | 2026-06-08 04:56:32.286484 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4654 |
vulnerable | 2026-06-08 04:56:29.909482 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4653 |
vulnerable | 2026-06-08 04:56:29.908983 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3702 |
vulnerable | 2026-06-08 04:55:16.442118 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-3387 |
vulnerable | 2026-06-08 04:49:53.923189 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.