Approved changes feed: RSS · Atom

cpe:2.3:a:freedesktop:poppler:0.73.0:*:*:*:*:*:*:*

part: a version: 0.73.0 update: *

VendorFreedesktop (2c544e5d-e68e-5b35-a616-dc08f0ba697e)
ProductPoppler (b2e9eefd-0d12-5535-9c38-bc4de43f056e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libpoppler-dev purl2cpe 2026-06-01 10:14:03.992734
pkg:deb/ubuntu/libpoppler-dev purl2cpe 2026-06-01 10:14:03.992736
pkg:freedesktop/poppler/poppler purl2cpe 2026-06-01 10:14:03.992737
pkg:github/freedesktop/poppler purl2cpe 2026-06-01 10:14:03.992738
pkg:rpm/fedora/poppler purl2cpe 2026-06-01 10:14:03.992740
pkg:rpm/opensuse/poppler purl2cpe 2026-06-01 10:14:03.992741

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-7310 vulnerable 2026-06-03 14:40:41.621748 Details available
In Poppler 0.73.0, a heap-based buffer over-read (due to an integer signedness error in the XRef::getEntry function in XRef.cc) allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted PDF document, as demonstrated by pdftocairo.
Published: 2019-02-03T03:00:00.000Z
Updated: 2024-08-04T20:46:46.065Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.