Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/poppler@0.71.0-5?distro=trixie
purl pkg:deb/debian/poppler@0.71.0-5?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-dh3p-2g4s-wke6 poppler: heap-based buffer over-read in function Splash::blitTransparent in splash/Splash.cc CVE-2019-10872
VCID-myjj-5fsv-sybj poppler: heap-based buffer over-read in JPXStream::init in JPEG2000Stream.cc CVE-2019-12293

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T12:10:25.512413+00:00 Debian Importer Fixing VCID-dh3p-2g4s-wke6 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:15:54.124419+00:00 Debian Importer Fixing VCID-myjj-5fsv-sybj https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T08:19:33.339412+00:00 Debian Importer Fixing VCID-dh3p-2g4s-wke6 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T18:11:36.390373+00:00 Debian Importer Fixing VCID-myjj-5fsv-sybj https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:50:12.075737+00:00 Debian Importer Fixing VCID-myjj-5fsv-sybj https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:50:11.921682+00:00 Debian Importer Fixing VCID-dh3p-2g4s-wke6 https://security-tracker.debian.org/tracker/data/json 38.1.0