freedesktop poppler 0.72.0
Approved changes feed: RSS · Atom
cpe:2.3:a:freedesktop:poppler:0.72.0:*:*:*:*:*:*:*
part: a version: 0.72.0 update: *
| Vendor | Freedesktop (2c544e5d-e68e-5b35-a616-dc08f0ba697e) |
|---|---|
| Product | Poppler (b2e9eefd-0d12-5535-9c38-bc4de43f056e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/libpoppler-dev |
purl2cpe | 2026-06-01 10:14:03.992718 |
pkg:deb/ubuntu/libpoppler-dev |
purl2cpe | 2026-06-01 10:14:03.992719 |
pkg:freedesktop/poppler/poppler |
purl2cpe | 2026-06-01 10:14:03.992721 |
pkg:github/freedesktop/poppler |
purl2cpe | 2026-06-01 10:14:03.992722 |
pkg:rpm/fedora/poppler |
purl2cpe | 2026-06-01 10:14:03.992723 |
pkg:rpm/opensuse/poppler |
purl2cpe | 2026-06-01 10:14:03.992725 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-20662 |
vulnerable | 2026-06-03 14:38:39.496174 |
Details available
In Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers to cause a denial-of-service (application crash caused by Object.h SIGABRT, because of a wrong return value from PDFDoc::setup) by crafting a PDF file in which an xref data structure is mishandled during extractPDFSubtype processing.
Published: 2019-01-03T13:00:00.000Z
Updated: 2024-08-05T12:05:17.635Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20650 |
vulnerable | 2026-06-03 14:38:39.474597 |
Details available
A reachable Object::dictLookup assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to the lack of a check for the dict data type, as demonstrated by use of the FileSpec class (in FileSpec.cc) in pdfdetach.
Published: 2019-01-01T16:00:00.000Z
Updated: 2024-08-05T12:05:17.794Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20551 |
vulnerable | 2026-06-03 14:38:39.354189 |
Details available
A reachable Object::getString assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to construction of invalid rich media annotation assets in the AnnotRichMedia class in Annot.c.
Published: 2018-12-28T04:00:00.000Z
Updated: 2024-08-05T12:05:17.424Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20481 |
vulnerable | 2026-06-03 14:38:39.152033 |
Details available
XRef::getEntry in XRef.cc in Poppler 0.72.0 mishandles unallocated XRef entries, which allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted PDF document, when XRefEntry::setFlag in XRef.h is called from Parser::makeStream in Parser.cc.
Published: 2018-12-26T04:00:00.000Z
Updated: 2024-08-05T12:05:16.857Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.