Skip to content
OpenAdvisories

Vendor

Poppler

11 known vulnerabilities.

Poppler at a glance

Last 12 months
1
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 1 vulnerability September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202610
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202510
Sep 202500
Aug 202500
Jul 202510
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

poppler 10 Innodata Labs 1
All Critical High Medium Low Exploited only Public exploit

11 results · Feed

  • High 8.7
    CVE-2026-12600

    Uncontrolled memory usage in Innodata Labs’ Poppler JPX decoder

    Denial-of-service (DoS) vulnerability in the internal JPEG2000 (JPX) decoding implementation of the Poppler fork developed by Innodata Labs. When an application processes an untrusted PDF file containing specially crafted JPXDecode images, a remote attacker c…

    Poppler Innodata Labs
  • Medium 6.1
    CVE-2025-52885

    GHSL-2025-042: Poppler has Use-After-Free

    Poppler ia a library for rendering PDF files, and examining or modifying their structure. A use-after-free (write) vulnerability has been detected in versions Poppler prior to 25.10.0 within the StructTreeRoot class. The issue arises from the use of raw point…

    Poppler poppler poppler poppler Debian Ubuntu
  • Medium 5.5
    CVE-2025-52886

    Poppler Use After Free Vulnerability

    Poppler is a PDF rendering library. Versions prior to 25.06.0 use `std::atomic_int` for reference counting. Because `std::atomic_int` is only 32 bits, it is possible to overflow the reference count and trigger a use-after-free. Version 25.06.0 patches the iss…

    Poppler poppler poppler poppler Debian Ubuntu
  • Unscored —
    CVE-2012-2142

    The error function in Error.cc in poppler before 0.21.4 allows remote attackers to execute arbitrary commands via a PDF…

    Poppler poppler poppler Debian
  • Unscored —
    CVE-2010-4654

    poppler before 0.16.3 has malformed commands that may cause corruption of the internal stack.

    Poppler poppler poppler ipe Debian Ubuntu
  • Unscored —
    CVE-2010-4653

    An integer overflow condition in poppler before 0.16.3 can occur when parsing CharCodes for fonts.

    Poppler poppler poppler xpdf Debian
  • Unscored —
    CVE-2010-0207

    In xpdf, the xref table contains an infinite loop which allows remote attackers to cause a denial of service (applicati…

    Poppler poppler poppler xpdf Debian
  • High 7.5
    CVE-2017-2818

    An exploitable heap overflow vulnerability exists in the image rendering functionality of Poppler 0.53.0. A specificall…

    Poppler poppler poppler Debian
  • High 8.8
    CVE-2017-2820

    An exploitable integer overflow vulnerability exists in the JPEG 2000 image parsing functionality of freedesktop.org Po…

    Poppler poppler poppler poppler Debian Ubuntu
  • High 7.5
    CVE-2017-2814

    An exploitable heap overflow vulnerability exists in the image rendering functionality of Poppler 0.53.0. A specificall…

    Poppler poppler poppler Debian
  • Unscored —
    CVE-2017-7511

    poppler since version 0.17.3 has been vulnerable to NULL pointer dereference in pdfunite triggered by specially crafted…

    Poppler poppler poppler poppler Debian Ubuntu