Search for packages
| purl | pkg:deb/debian/poppler@22.12.0-2%2Bdeb12u1?distro=trixie |
| Next non-vulnerable version | 24.02.0-2 |
| Latest non-vulnerable version | 25.03.0-11.1 |
| Risk | 3.4 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-48d5-zxmm-r3g4
Aliases: CVE-2025-50420 |
An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS). |
Affected by 2 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-a8zz-dfdm-1uf7
Aliases: CVE-2025-43718 |
poppler: Poppler stack overflow |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-anb3-1s96-wbaq
Aliases: CVE-2025-43903 |
poppler: SignatureValue not checked within SignerInfo |
Affected by 0 other vulnerabilities. Affected by 2 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-ygrf-gq35-fkfd
Aliases: CVE-2025-52886 |
Multiple vulnerabilities have been discovered in Poppler, the worst of which could lead to execution of arbitrary code. |
Affected by 0 other vulnerabilities. Affected by 2 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-yy6j-1h5z-wbgp
Aliases: CVE-2025-52885 |
poppler: Use-After-Free in StructTreeRoot class |
Affected by 0 other vulnerabilities. |
|
VCID-yyxy-juya-a3f1
Aliases: CVE-2024-6239 |
poppler: pdfinfo: crash in broken documents when using -dests parameter |
Affected by 0 other vulnerabilities. Affected by 2 other vulnerabilities. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-1j2u-8dqz-q3ad | xpdf: XRef table parsing infinite loop |
CVE-2010-0207
|
| VCID-1z9b-trb7-2ubp | KPdf and KWord both include vulnerable Xpdf code to handle PDF files, making them vulnerable to the execution of arbitrary code. |
CVE-2005-3626
|
| VCID-21p7-89u3-bydd | Multiple vulnerabilities have been found in Poppler, allowing remote attackers to execute arbitrary code or cause a Denial of Service condition. |
CVE-2013-4474
|
| VCID-29b3-s5n9-5fd8 | poppler: out of bounds read in pdfunite |
CVE-2018-13988
|
| VCID-2ck3-hjtt-hbax | poppler: pdftohtml: access to uninitialized pointer could lead to DoS |
CVE-2020-27778
|
| VCID-35b2-jj1x-rkcf | Multiple vulnerabilities have been found in Poppler, some of which may allow execution of arbitrary code. |
CVE-2009-3604
|
| VCID-3eaw-7xrw-tkft | Multiple vulnerabilities have been found in Poppler, some of which may allow execution of arbitrary code. |
CVE-2009-3605
|
| VCID-3kw1-pxdk-27h4 | poppler: NULL pointer dereference in the SplashOutputDev::type3D0() function |
CVE-2017-14927
|
| VCID-3u3m-ru9u-buem | security update |
CVE-2017-9775
|
| VCID-4128-ep6n-hufz | Multiple vulnerabilities have been found in Poppler, some of which may allow execution of arbitrary code. |
CVE-2010-3704
|
| VCID-44yv-r4hg-17db | security update |
CVE-2017-14520
|
| VCID-48ua-ch85-w3cg | poppler: Reachable assertion in Object.h |
CVE-2022-38349
|
| VCID-4jfu-4w71-g7bt | Multiple vulnerabilities have been found in Poppler, some of which may allow execution of arbitrary code. |
CVE-2009-1187
|
| VCID-4rx1-68jr-myac | xpdf: Invalid pointer dereference by processing JBIG2 PDF stream objects |
CVE-2010-0206
|
| VCID-4ucr-xaac-7uc7 | poppler: Floating-Point Exception in Poppler |
CVE-2025-32364
|
| VCID-4yej-ag45-uuga | Multiple vulnerabilities have been found in Poppler, some of which may allow execution of arbitrary code. |
CVE-2010-3703
|
| VCID-5jej-esjt-uqak | poppler: integer overflow in Parser::makeStream in Parser.cc |
CVE-2018-21009
|
| VCID-5py7-z1gg-9fet | poppler: divide-by-zero in function SplashOutputDev::tilingPatternFill in SplashOutputDev.cc |
CVE-2019-14494
|
| VCID-5q1h-7uk2-nkhx | Multiple vulnerabilities have been discovered in Xpdf, GPdf, CUPS and Poppler potentially resulting in the execution of arbitrary code. |
CVE-2005-3193
|
| VCID-65sa-tagy-3ybs | Multiple vulnerabilities have been found in Poppler, some of which may allow execution of arbitrary code. |
CVE-2009-0799
|
| VCID-68rw-a4ah-5khm | Multiple vulnerabilities have been found in Poppler, some of which may allow execution of arbitrary code. |
CVE-2009-1182
|
| VCID-6b75-d741-vufk | Multiple vulnerabilities have been found in Poppler, some of which may allow execution of arbitrary code. |
CVE-2013-1790
|
| VCID-6dwz-8kx9-rugr | Multiple vulnerabilities have been found in Poppler, some of which may allow execution of arbitrary code. |
CVE-2009-3603
|
| VCID-6wa8-zfbz-hqcg | Multiple vulnerabilities in Xpdf could result in execution of arbitrary code. |
CVE-2009-4035
|
| VCID-72nw-9jgd-4kdw | poppler: abort in main() in pdfunite.cc |
CVE-2022-37051
|
| VCID-74sz-r8kq-qkd5 | poppler: reachable Object::getString assertion in AnnotRichMedia class in Annot.c |
CVE-2018-20551
|
| VCID-7n47-6efe-eybd | poppler: NULL pointer dereference in the AnnotRichMedia::Content::Content |
CVE-2017-14926
|
| VCID-7p5r-eqxs-tugv | poppler: heap-based buffer over-read in function downsample_row_box_filter in CairoRescaleBox.cc |
CVE-2019-9631
|
| VCID-8nj9-hqay-dfdj | Multiple vulnerabilities have been found in Poppler, some of which may allow execution of arbitrary code. |
CVE-2009-3938
|
| VCID-8t2a-b56v-tqcs | poppler: stack consumption in function Dict::find() in Dict.cc |
CVE-2019-9903
|
| VCID-8uds-zs9k-47en | Multiple vulnerabilities have been discovered in Xpdf, GPdf, CUPS and Poppler potentially resulting in the execution of arbitrary code. |
CVE-2005-3191
|
| VCID-96jm-1vhy-eyfd | poppler: infinite recursion in function FontInfoScanner::scanFonts in FontInfo.cc |
CVE-2019-11026
|
| VCID-9hnb-h64u-zkev | In Xpdf 4.01.01, a buffer over-read could be triggered in FoFiType1C::convertToType1 in fofi/FoFiType1C.cc when the index number is larger than the charset array bounds. It can, for example, be triggered by sending a crafted PDF document to the pdftops tool. It allows an attacker to use a crafted pdf file to cause Denial of Service or an information leak, or possibly have unspecified other impact. |
CVE-2019-12957
|
| VCID-9kq5-863e-3fgq | xpdfreader 4.03 is vulnerable to Buffer Overflow. |
CVE-2021-40226
|
| VCID-9yxn-jhqm-hbhv | Multiple vulnerabilities have been found in Poppler, some of which may allow execution of arbitrary code. |
CVE-2013-1788
|
| VCID-bc96-6vy6-ryfz | poppler: Stack-Overflow in `FoFiType1C::cvtGlyph` |
CVE-2020-36023
|
| VCID-bkr4-sab1-5ka2 | KPdf and KWord both include vulnerable Xpdf code to handle PDF files, making them vulnerable to the execution of arbitrary code. |
CVE-2005-3627
|
| VCID-bvmu-gq2p-jygf | Multiple vulnerabilities have been found in Poppler, the worst of which could allow the execution of arbitrary code. |
CVE-2017-7511
|
| VCID-byr3-7wgc-jye9 | Multiple vulnerabilities have been discovered in T1Lib, the worst of which could lead to remote execution of arbitrary code. |
CVE-2011-1554
|
| VCID-c4wz-u632-eyeh | poppler: abort in PDFDoc::savePageAs in PDFDoc.c |
CVE-2022-37050
|
| VCID-cf6h-786m-rkds | Multiple vulnerabilities have been found in Poppler, allowing remote attackers to execute arbitrary code or cause a Denial of Service condition. |
CVE-2013-4473
|
| VCID-crcj-9bh9-7kb7 | poppler: integer overflow in JPXStream::init function leading to memory consumption |
CVE-2019-9959
|
| VCID-csqv-t3cr-4uap | security update |
CVE-2017-14517
|
| VCID-ctb2-8h4y-vybd | Multiple vulnerabilities have been found in Poppler, some of which may allow execution of arbitrary code. |
CVE-2009-0166
|
| VCID-cwyp-gapg-yufk | poppler: reachable Object::dictLookup assertion in FileSpec class in FileSpec.cc |
CVE-2018-20650
|
| VCID-czzu-9vw8-wbb2 | Multiple vulnerabilities have been found in Poppler, some of which may allow execution of arbitrary code. |
CVE-2013-1789
|
| VCID-d5fj-5prg-97f4 | poppler: Out-of-Bounds Read in Poppler |
CVE-2025-32365
|
| VCID-dgb8-nes9-8fb7 | Multiple vulnerabilities have been found in Poppler, some of which may allow execution of arbitrary code. |
CVE-2009-0147
|
| VCID-dh3p-2g4s-wke6 | poppler: heap-based buffer over-read in function Splash::blitTransparent in splash/Splash.cc |
CVE-2019-10872
|
| VCID-dn3b-smm9-63eb | Poppler does not handle fonts inside PDF files safely, allowing for execution of arbitrary code. |
CVE-2008-1693
|
| VCID-durs-kj4r-jbf2 | security flaw |
CVE-2005-2097
|
| VCID-e6c9-n7zk-3bfz | poppler: heap based buffer overflow in DCTStream.cc |
CVE-2010-5110
|
| VCID-ebyg-yhza-wkaq | A stack-based buffer over-read exists in PostScriptFunction::transform in Function.cc in Xpdf 4.01.01 because GfxSeparationColorSpace and GfxDeviceNColorSpace mishandle tint transform functions. It can, for example, be triggered by sending a crafted PDF document to the pdftops tool. It might allow an attacker to cause Denial of Service or leak memory data. |
CVE-2019-12493
|
| VCID-enu8-gjre-fbap | poppler: uncontrolled recursion in pdfinfo and pdftops |
CVE-2020-23804
|
| VCID-ervb-318m-tygv | Multiple vulnerabilities have been found in Poppler, the worst of which could allow a Denial of Service. |
CVE-2017-14975
|
| VCID-ervj-1sdg-b3bm | poppler: pdfdetach utility does not validate save paths |
CVE-2018-19060
|
| VCID-ex2h-ahg3-s7b9 | Multiple vulnerabilities have been found in Poppler, the worst of which could allow a Denial of Service. |
CVE-2017-14977
|
| VCID-fct6-695j-t7bs | PDFKit and ImageKits are vulnerable to an integer overflow and a stack overflow allowing for the user-assisted execution of arbitrary code. |
CVE-2007-3387
|
| VCID-gbm8-vcwy-u3g2 | Multiple vulnerabilities have been found in Poppler, some of which may allow execution of arbitrary code. |
CVE-2009-1179
|
| VCID-gbuy-ru9c-h3en | poppler/evince: DoS via crafted PDF file |
CVE-2009-0755
|
| VCID-gc6w-tctk-nycd | Multiple vulnerabilities have been found in Poppler, some of which may allow execution of arbitrary code. |
CVE-2010-4653
|
| VCID-gfxh-3er7-zyam | xpdf: buffer over-read via crafted PDF document leads to DoS or memory leak |
CVE-2019-12360
|
| VCID-gt34-muf6-abc7 | Multiple vulnerabilities have been found in Poppler, the worst of which could allow the execution of arbitrary code. |
CVE-2017-9865
|
| VCID-h1ka-xthk-rug9 | security update |
CVE-2017-14518
|
| VCID-h3q1-dbx2-hubv | A vulnerability has been discovered in Poppler which could allow for arbitrary code execution. |
CVE-2022-38784
|
| VCID-hf11-8tk1-5kc4 | poppler: Memory corruption via Gfx.cc infinite loop |
CVE-2017-14929
|
| VCID-hmbq-4c5b-ukd7 | poppler: NULL pointer dereference in the XRef::getEntry in XRef.cc |
CVE-2018-20481
|
| VCID-hszt-6bxr-syfe | poppler: Floating point exception in the ImageStream class |
CVE-2017-14617
|
| VCID-jauh-5qga-hucw | poppler: Stack exhaustion due to infinite recursive call in pdfunite |
CVE-2017-7515
|
| VCID-jc37-xtrj-p3cm | poppler: SIGABRT PDFDoc::setup class in PDFDoc.cc |
CVE-2018-20662
|
| VCID-jd42-3thk-rqhr | Multiple vulnerabilities have been found in Poppler, the worst of which could allow the execution of arbitrary code. |
CVE-2017-9406
|
| VCID-jvuz-2phs-87du | Multiple vulnerabilities have been found in Poppler, some of which may allow execution of arbitrary code. |
CVE-2009-1180
|
| VCID-jw5j-xk5g-v3b1 | Multiple vulnerabilities have been found in Poppler, the worst of which could allow a Denial of Service. |
CVE-2017-1000456
|
| VCID-k1uz-1eqt-pbc6 | poppler: buffer overflow in HtmlOutputDev::page |
CVE-2020-18839
|
| VCID-k44f-gsg9-eqce | Multiple vulnerabilities have been found in Poppler, allowing remote attackers to execute arbitrary code or cause a Denial of Service condition. |
CVE-2013-7296
|
| VCID-kf69-av43-wffs | Multiple vulnerabilities have been found in Poppler, the worst of which could allow a Denial of Service. |
CVE-2017-14976
|
| VCID-kgk7-hqby-wkez | Poppler and various KDE components are vulnerable to multiple memory management issues possibly resulting in the execution of arbitrary code. |
CVE-2007-4352
|
| VCID-kre4-9v6u-3ked | poppler: NULL pointer dereference in Annot.h:AnnotPath::getCoordsLength() allows for denial of service via crafted PDF |
CVE-2018-10768
|
| VCID-kwa4-641f-ducs | security update |
CVE-2017-9776
|
| VCID-mg1z-d7y8-dfaj | KPdf and KWord both include vulnerable Xpdf code to handle PDF files, making them vulnerable to the execution of arbitrary code. |
CVE-2005-3624
|
| VCID-mq43-5wd8-ayan | xpdf infinite loop DoS |
CVE-2007-0104
|
| VCID-mqt3-g77k-xqer | security update |
CVE-2017-14519
|
| VCID-myjj-5fsv-sybj | poppler: heap-based buffer over-read in JPXStream::init in JPEG2000Stream.cc |
CVE-2019-12293
|
| VCID-n1sx-y7xc-kqfb | poppler: NULL pointer dereference in `FoFiType1C::convertToType1` |
CVE-2020-36024
|
| VCID-ncat-8jz5-m7e5 | An issue was discovered in Xpdf 4.01.01. There is an FPE in the function PostScriptFunction::exec at Function.cc for the psOpIdiv case. |
CVE-2019-10018
|
| VCID-neqs-cg1p-7bb7 | Multiple vulnerabilities have been found in Poppler, some of which may allow execution of arbitrary code. |
CVE-2010-3702
|
| VCID-ng15-dzek-kyda | Multiple vulnerabilities have been found in Poppler, some of which may allow execution of arbitrary code. |
CVE-2009-3607
|
| VCID-ngzc-42z2-8yae | Multiple vulnerabilities have been found in Poppler, some of which may allow execution of arbitrary code. |
CVE-2012-2142
|
| VCID-nqqu-29qr-wfec | poppler: reachable assertion due to a failure in markObject() |
CVE-2022-37052
|
| VCID-p219-w8nj-qqg7 | Poppler is affected by a memory management issue, which could lead to the execution of arbitrary code. |
CVE-2008-2950
|
| VCID-pc5k-98kh-suce | poppler: NULL pointer dereference in the AnnotRichMedia::Configuration::Configuration |
CVE-2017-14928
|
| VCID-qayv-8u9a-83h4 | KPdf includes vulnerable Xpdf code to handle PDF files, making it vulnerable to the execution of arbitrary code. |
CVE-2006-0301
|
| VCID-qdcv-xd8k-8qbu | Multiple vulnerabilities have been found in Poppler, the worst of which could allow a Denial of Service. |
CVE-2018-19149
|
| VCID-qjj9-dejh-vuaq | poppler: Infinite recursion in fofi/FoFiType1C.cc:FoFiType1C::cvtGlyph() function allows denial of service |
CVE-2017-18267
|
| VCID-qmt5-gtpg-vbg2 | Multiple vulnerabilities have been found in Poppler, the worst of which allows remote attackers to execute arbitrary code. |
CVE-2015-8868
|
| VCID-qpwe-7kfy-pyb8 | poppler: heap-based buffer over-read in XRef::getEntry in XRef.cc |
CVE-2019-7310
|
| VCID-qsy6-em2u-cyd2 | security update |
CVE-2017-15565
|
| VCID-qtb6-gvjp-cqbq | Multiple vulnerabilities have been discovered in Poppler, the worst of which could lead to execution of arbitrary code. |
CVE-2022-27337
|
| VCID-rm6a-c4rf-f7hc | Multiple vulnerabilities have been found in Poppler, some of which may allow execution of arbitrary code. |
CVE-2009-0800
|
| VCID-s3q2-uvnc-wfep | poppler: heap-based buffer over-read in function PSOutputDev::checkPageSlice in PSOutputDev.cc |
CVE-2019-10871
|
| VCID-s66u-r7vs-bfdu | Multiple vulnerabilities have been discovered in T1Lib, the worst of which could lead to remote execution of arbitrary code. |
CVE-2011-1553
|
| VCID-sv3r-4tym-qua5 | Poppler and various KDE components are vulnerable to multiple memory management issues possibly resulting in the execution of arbitrary code. |
CVE-2007-5393
|
| VCID-tabs-mq7h-7bh5 | poppler: heap-based buffer overflow via a crafted PDF document |
CVE-2020-35702
|
| VCID-tfe8-bq62-3ke4 | Poppler: out-of-bounds read |
CVE-2024-56378
|
| VCID-tt3h-qbbv-zuev | poppler: memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc |
CVE-2018-18897
|
| VCID-tu6x-7fgv-1ffu | poppler: heap-based buffer overflow in function ImageStream::getLine() in Stream.cc |
CVE-2019-9200
|
| VCID-tzdq-9gfz-yud5 | poppler: null-pointer dereference in function SplashClip::clipAALine in splash/SplashClip.cc |
CVE-2019-10873
|
| VCID-uczb-yext-6yfq | Multiple vulnerabilities have been found in Poppler, some of which may allow execution of arbitrary code. |
CVE-2009-1188
|
| VCID-uny2-k19n-1bb2 | Multiple vulnerabilities have been found in Poppler, some of which may allow execution of arbitrary code. |
CVE-2009-1181
|
| VCID-upkc-66fh-wbby | Multiple vulnerabilities have been discovered in T1Lib, the worst of which could lead to remote execution of arbitrary code. |
CVE-2011-0764
|
| VCID-utex-65f9-53cq | KPdf and KWord both include vulnerable Xpdf code to handle PDF files, making them vulnerable to the execution of arbitrary code. |
CVE-2005-3625
|
| VCID-v15u-sguq-skg9 | poppler/evince: DoS via crafted PDF file |
CVE-2009-0756
|
| VCID-vr4e-q9gp-qbem | poppler: Denial of Service (DoS) (crash) via a crafted PDF file in OutlineItem::open. |
CVE-2023-34872
|
| VCID-vudr-8rrg-hufx | Multiple vulnerabilities have been found in Poppler, some of which may allow execution of arbitrary code. |
CVE-2009-1183
|
| VCID-wbyn-9mx6-a3gd | poppler: out-of-bounds read in EmbFile::save2 in FileSpec.cc |
CVE-2018-19059
|
| VCID-wpgs-8fw5-wbhe | Poppler and various KDE components are vulnerable to multiple memory management issues possibly resulting in the execution of arbitrary code. |
CVE-2007-5392
|
| VCID-xddx-numk-a7bn | Multiple vulnerabilities have been found in Poppler, some of which may allow execution of arbitrary code. |
CVE-2009-3608
|
| VCID-xqh5-sxfb-gueh | Multiple vulnerabilities have been discovered in Xpdf, GPdf, CUPS and Poppler potentially resulting in the execution of arbitrary code. |
CVE-2005-3192
|
| VCID-ynvq-nzrq-9bca | Multiple vulnerabilities have been found in Poppler, some of which may allow execution of arbitrary code. |
CVE-2009-0146
|
| VCID-yu46-ypr2-dfce | Multiple vulnerabilities have been found in Poppler, some of which may allow execution of arbitrary code. |
CVE-2009-3609
|
| VCID-yyzk-7mqj-m7hq | poppler: infinite recursion in Parser::getObj function in Parser.cc |
CVE-2018-16646
|
| VCID-z77s-ej5r-rbcd | Multiple vulnerabilities have been discovered in T1Lib, the worst of which could lead to remote execution of arbitrary code. |
CVE-2011-1552
|
| VCID-zgja-p6ey-2kex | Multiple vulnerabilities have been found in Poppler, the worst of which could allow the execution of arbitrary code. |
CVE-2017-9408
|
| VCID-zn54-s7jz-ruh8 | Multiple vulnerabilities have been found in Poppler, some of which may allow execution of arbitrary code. |
CVE-2010-4654
|
| VCID-zr8n-mfu1-4yg4 | Multiple vulnerabilities have been found in Poppler, some of which may allow execution of arbitrary code. |
CVE-2009-3606
|
| VCID-zzy2-1yr8-83cf | poppler: reachable abort in Object.h |
CVE-2018-19058
|