Freedesktop Poppler
89 CVEs affecting Freedesktop Poppler. Latest disclosed: 2025-10-01. Critical: 1, High: 32.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-9631 | Critical | 9.8 | 2019-03-08 | Poppler 0.74.0 has a heap-based buffer over-read in the CairoRescaleBox.cc downsample_row_box_filter function. |
CVE-2018-21009 | High | 8.8 | 2019-09-05 | Poppler before 0.66.0 has an integer overflow in Parser::makeStream in Parser.cc. |
CVE-2019-12293 | High | 8.8 | 2019-05-23 | In Poppler through 0.76.1, there is a heap-based buffer over-read in JPXStream::init in JPEG2000Stream.cc via data with inconsistent heights or widths. |
CVE-2019-10872 | High | 8.8 | 2019-04-05 | An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function Splash::blitTransparent at splash/Splash.cc. |
CVE-2019-9545 | High | 8.8 | 2019-03-01 | An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readTextRegion() located in JBIG2Stream.cc, can be triggered by sending a… |
CVE-2019-9543 | High | 8.8 | 2019-03-01 | An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readGenericBitmap() located in JBIG2Stream.cc, can be triggered by sendin… |
CVE-2019-9200 | High | 8.8 | 2019-02-26 | A heap-based buffer underwrite exists in ImageStream::getLine() located at Stream.cc in Poppler 0.74.0 that can (for example) be triggered by sending a crafted… |
CVE-2017-1000456 | High | 8.8 | 2018-01-02 | freedesktop.org libpoppler 0.60.1 fails to validate boundaries in TextPool::addWord, leading to overflow in subsequent calculations. |
CVE-2017-15565 | High | 8.8 | 2017-10-17 | In Poppler 0.59.0, a NULL Pointer Dereference exists in the GfxImageColorMap::getGrayLine() function in GfxState.cc via a crafted PDF document. |
CVE-2017-2820 | High | 8.8 | 2017-07-12 | An exploitable integer overflow vulnerability exists in the JPEG 2000 image parsing functionality of freedesktop.org Poppler 0.53.0. A specially crafted PDF fi… |
CVE-2022-38784 | High | 7.8 | 2022-08-30 | Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a spec… |
CVE-2022-38171 | High | 7.8 | 2022-08-22 | Xpdf prior to version 4.04 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIG2Stream.cc). Processing a specially craft… |
CVE-2021-30860 | High | 7.8 | 2021-08-24 | An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, macOS Big… |
CVE-2020-35702 | High | 7.8 | 2020-12-25 | DCTStream::getChars in DCTStream.cc in Poppler 20.12.1 has a heap-based buffer overflow via a crafted PDF document. NOTE: later reports indicate that this only… |
CVE-2012-2142 | High | 7.8 | 2020-01-09 | The error function in Error.cc in poppler before 0.21.4 allows remote attackers to execute arbitrary commands via a PDF containing an escape sequence for a ter… |
CVE-2010-4654 | High | 7.8 | 2019-11-13 | poppler before 0.16.3 has malformed commands that may cause corruption of the internal stack. |
CVE-2019-7310 | High | 7.8 | 2019-02-03 | In Poppler 0.73.0, a heap-based buffer over-read (due to an integer signedness error in the XRef::getEntry function in XRef.cc) allows remote attackers to caus… |
CVE-2017-14617 | High | 7.8 | 2017-09-20 | In Poppler 0.59.0, a floating point exception occurs in the ImageStream class in Stream.cc, which may lead to a potential attack when handling malicious PDF fi… |
CVE-2017-14520 | High | 7.8 | 2017-09-17 | In Poppler 0.59.0, a floating point exception occurs in Splash::scaleImageYuXd() in Splash.cc, which may lead to a potential attack when handling malicious PDF… |
CVE-2017-14518 | High | 7.8 | 2017-09-17 | In Poppler 0.59.0, a floating point exception exists in the isImageInterpolationRequired() function in Splash.cc via a crafted PDF document. |