Approved changes feed: RSS · Atom

cpe:2.3:a:freedesktop:poppler:0.68.0:*:*:*:*:*:*:*

part: a version: 0.68.0 update: *

VendorFreedesktop (2c544e5d-e68e-5b35-a616-dc08f0ba697e)
ProductPoppler (b2e9eefd-0d12-5535-9c38-bc4de43f056e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libpoppler-dev purl2cpe 2026-06-01 10:14:03.992653
pkg:deb/ubuntu/libpoppler-dev purl2cpe 2026-06-01 10:14:03.992655
pkg:freedesktop/poppler/poppler purl2cpe 2026-06-01 10:14:03.992656
pkg:github/freedesktop/poppler purl2cpe 2026-06-01 10:14:03.992657
pkg:rpm/fedora/poppler purl2cpe 2026-06-01 10:14:03.992659
pkg:rpm/opensuse/poppler purl2cpe 2026-06-01 10:14:03.992660

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-16646 vulnerable 2026-06-03 14:38:20.860261 Details available
In Poppler 0.68.0, the Parser::getObj() function in Parser.cc may cause infinite recursion via a crafted file. A remote attacker can leverage this for a DoS attack.
Published: 2018-09-06T23:00:00.000Z
Updated: 2024-08-05T10:32:52.340Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.