GCVE - cpe:2.3:a:freedesktop:poppler:0.71.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:freedesktop:poppler:0.71.0:*:*:*:*:*:*:*

part: a version: 0.71.0 update: *

Vendor	Freedesktop (`2c544e5d-e68e-5b35-a616-dc08f0ba697e`)
Product	Poppler (`b2e9eefd-0d12-5535-9c38-bc4de43f056e`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/libpoppler-dev`	purl2cpe	2026-06-01 10:14:03.992702
`pkg:deb/ubuntu/libpoppler-dev`	purl2cpe	2026-06-01 10:14:03.992703
`pkg:freedesktop/poppler/poppler`	purl2cpe	2026-06-01 10:14:03.992705
`pkg:github/freedesktop/poppler`	purl2cpe	2026-06-01 10:14:03.992706
`pkg:rpm/fedora/poppler`	purl2cpe	2026-06-01 10:14:03.992707
`pkg:rpm/opensuse/poppler`	purl2cpe	2026-06-01 10:14:03.992709

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-19060`	vulnerable	2026-06-03 14:38:28.929021	Details available An issue was discovered in Poppler 0.71.0. There is a NULL pointer dereference in goo/GooString.h, will lead to denial of service, as demonstrated by utils/pdfdetach.cc not validating a filename of an embedded file before constructing a save path. Published: 2018-11-07T16:00:00.000Z Updated: 2024-08-05T11:30:03.455Z Open on db.gcve.eu Reference links https://usn.ubuntu.com/3837-1/ https://gitlab.freedesktop.org/poppler/poppler/issues/660 https://access.redhat.com/errata/RHSA-2019:2022	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-19059`	vulnerable	2026-06-03 14:38:28.928609	Details available An issue was discovered in Poppler 0.71.0. There is a out-of-bounds read in EmbFile::save2 in FileSpec.cc, will lead to denial of service, as demonstrated by utils/pdfdetach.cc not validating embedded files before save attempts. Published: 2018-11-07T16:00:00.000Z Updated: 2024-08-05T11:30:04.114Z Open on db.gcve.eu Reference links https://gitlab.freedesktop.org/poppler/poppler/issues/661 https://usn.ubuntu.com/3837-1/ https://access.redhat.com/errata/RHSA-2019:2022	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-19058`	vulnerable	2026-06-03 14:38:28.928048	Details available An issue was discovered in Poppler 0.71.0. There is a reachable abort in Object.h, will lead to denial of service because EmbFile::save2 in FileSpec.cc lacks a stream check before saving an embedded file. Published: 2018-11-07T16:00:00.000Z Updated: 2024-08-05T11:30:03.511Z Open on db.gcve.eu Reference links https://usn.ubuntu.com/3837-1/ https://lists.debian.org/debian-lts-announce/2019/03/msg00008.html https://gitlab.freedesktop.org/poppler/poppler/issues/659 https://access.redhat.com/errata/RHSA-2019:2022 https://lists.debian.org/debian-lts-announce/2020/11/msg00014.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-18897`	vulnerable	2026-06-03 14:38:28.576982	Details available An issue was discovered in Poppler 0.71.0. There is a memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc, as demonstrated by pdftocairo. Published: 2018-11-02T06:00:00.000Z Updated: 2024-08-05T11:23:08.450Z Open on db.gcve.eu Reference links https://gitlab.freedesktop.org/poppler/poppler/issues/654 https://usn.ubuntu.com/4042-1/ https://access.redhat.com/errata/RHSA-2019:2022 https://access.redhat.com/errata/RHSA-2019:2713 https://lists.debian.org/debian-lts-announce/2022/09/msg00030.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.