Approved changes feed: RSS · Atom
cpe:2.3:a:freedesktop:poppler:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Freedesktop (2c544e5d-e68e-5b35-a616-dc08f0ba697e) |
|---|---|
| Product | Poppler (b2e9eefd-0d12-5535-9c38-bc4de43f056e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/libpoppler-dev |
purl2cpe | 2026-06-01 10:14:03.991328 |
pkg:deb/ubuntu/libpoppler-dev |
purl2cpe | 2026-06-01 10:14:03.991331 |
pkg:freedesktop/poppler/poppler |
purl2cpe | 2026-06-01 10:14:03.991334 |
pkg:github/freedesktop/poppler |
purl2cpe | 2026-06-01 10:14:03.991337 |
pkg:rpm/fedora/poppler |
purl2cpe | 2026-06-01 10:14:03.991339 |
pkg:rpm/opensuse/poppler |
purl2cpe | 2026-06-01 10:14:03.991342 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-93312 |
vulnerable | 2026-10-13 12:28:56.225678 |
Freedesktop Poppler JBIG2Stream.cc rewind null pointer dereference
MEDIUM (4.3)
A flaw has been found in Freedesktop Poppler 26.07.0. Impacted is the function JBIG2Stream::rewind of the file poppler/JBIG2Stream.cc. This manipulation causes null pointer dereference. It is possible to initiate the attack remotely. The exploit has been published and may be used. Upgrading to version 26.08.0 is recommended to address this issue. Patch name: 5e49250f13b0390edeb3f90eb4c02c9941f97067. Upgrading the affected component is advised.
Published: 2026-09-18T00:45:12.489Z
Updated: 2026-09-22T18:23:02.769Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-93313 |
vulnerable | 2026-10-13 12:28:56.071117 |
Freedesktop Poppler JBIG2Stream.cc readCodeTableSeg integer overflow
MEDIUM (6.3)
A vulnerability was found in Freedesktop Poppler 26.07.0. The impacted element is the function JBIG2Stream::readCodeTableSeg of the file poppler/JBIG2Stream.cc. Performing a manipulation results in integer overflow. The attack can be initiated remotely. The exploit has been made public and could be used. The patch is named eb87cf711563894649bd0c365baa479401dc6d51. To fix this issue, it is recommended to deploy a patch.
Published: 2026-09-18T01:15:13.107Z
Updated: 2026-09-18T12:54:25.677Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-93311 |
vulnerable | 2026-10-13 12:28:55.965031 |
Freedesktop Poppler SampledFunction Function.cc integer overflow
MEDIUM (4.3)
A vulnerability was detected in Freedesktop Poppler 26.07.0. This issue affects the function SampledFunction::SampledFunction of the file poppler/Function.cc of the component SampledFunction. The manipulation of the argument BitsPerSample results in integer overflow. The attack may be performed from remote. The exploit is now public and may be used. The project was informed of the problem early through a bug report but has not responded yet.
Published: 2026-09-18T00:30:07.169Z
Updated: 2026-09-22T15:44:44.585Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-93314 |
vulnerable | 2026-10-13 12:28:55.934273 |
Freedesktop Poppler FoFiTrueType.cc mapCodeToGID integer overflow
MEDIUM (6.3)
A vulnerability was determined in Freedesktop Poppler 26.07.0. This affects the function FoFiTrueType::mapCodeToGID of the file fofi/FoFiTrueType.cc. Executing a manipulation of the argument segCnt can lead to integer overflow. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. This patch is called ed2a5538cf0a8d3ff908191eda9b73f91a5f952a. It is advisable to implement a patch to correct this issue.
Published: 2026-09-18T01:30:10.127Z
Updated: 2026-09-22T02:01:37.143Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52886 |
vulnerable | 2026-06-08 07:31:13.141286 |
Poppler Use After Free Vulnerability
Poppler is a PDF rendering library. Versions prior to 25.06.0 use `std::atomic_int` for reference counting. Because `std::atomic_int` is only 32 bits, it is possible to overflow the reference count and trigger a use-after-free. Version 25.06.0 patches the issue.
Published: 2025-07-02T15:46:49.733Z
Updated: 2025-11-04T22:06:42.737Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-50420 |
vulnerable | 2026-06-08 07:31:10.924005 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-43903 |
vulnerable | 2026-06-08 07:25:10.451230 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-43718 |
vulnerable | 2026-06-08 07:25:09.307405 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-32365 |
vulnerable | 2026-06-08 07:18:59.493535 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-32364 |
vulnerable | 2026-06-08 07:18:59.493165 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6239 |
vulnerable | 2026-06-08 06:58:18.346119 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-56378 |
vulnerable | 2026-06-08 06:54:17.799199 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34872 |
vulnerable | 2026-06-08 06:06:26.220693 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38784 |
vulnerable | 2026-06-08 05:47:17.336647 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38171 |
vulnerable | 2026-06-08 05:47:15.926523 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-30860 |
vulnerable | 2026-06-08 05:31:51.745795 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-27778 |
vulnerable | 2026-06-08 05:23:53.165278 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9959 |
vulnerable | 2026-06-08 05:14:26.721070 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14494 |
vulnerable | 2026-06-08 05:12:54.914587 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-12293 |
vulnerable | 2026-06-08 05:12:38.895847 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-21009 |
vulnerable | 2026-06-08 05:11:28.320424 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-19149 |
vulnerable | 2026-06-08 05:11:15.401873 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-13988 |
vulnerable | 2026-06-08 05:10:52.481824 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-10768 |
vulnerable | 2026-06-08 05:10:37.078842 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-9776 |
vulnerable | 2026-06-08 05:10:10.508228 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-9775 |
vulnerable | 2026-06-08 05:10:10.507193 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7515 |
vulnerable | 2026-06-08 05:09:56.368843 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-18267 |
vulnerable | 2026-06-08 05:09:10.655595 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-7296 |
vulnerable | 2026-06-08 05:05:09.477768 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4474 |
vulnerable | 2026-06-08 05:04:47.216998 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4473 |
vulnerable | 2026-06-08 05:04:47.153074 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4472 |
vulnerable | 2026-06-08 05:04:47.150229 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1790 |
vulnerable | 2026-06-08 05:03:56.378778 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1789 |
vulnerable | 2026-06-08 05:03:56.378357 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1788 |
vulnerable | 2026-06-08 05:03:56.377827 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2142 |
vulnerable | 2026-06-08 05:00:52.978694 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-5110 |
vulnerable | 2026-06-08 04:56:32.286484 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4654 |
vulnerable | 2026-06-08 04:56:29.909482 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4653 |
vulnerable | 2026-06-08 04:56:29.908983 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3702 |
vulnerable | 2026-06-08 04:55:16.442118 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-3387 |
vulnerable | 2026-06-08 04:49:53.923189 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.