Description
The PostScriptFunction::PostScriptFunction function in poppler/Function.cc in the PDF parser in poppler 0.8.7 and possibly other versions up to 0.15.1, and possibly other products, allows context-dependent attackers to cause a denial of service (crash) via a PDF file that triggers an uninitialized pointer dereference.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | poppler | 0.12.4-1.2 | — |
| Debian 14 | xpdf | 3.02-9 | — |
| Debian 13 | poppler | 0.12.4-1.2 | — |
| Debian 13 | xpdf | 3.02-9 | — |
| Debian 12 | poppler | 0.12.4-1.2 | — |
| Debian 12 | xpdf | 3.02-9 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | ipe | No fix yet | — |
| Ubuntu 26.04 LTS | ipe | No fix yet | — |
| Ubuntu 25.10 | ipe | No fix yet | — |
| Ubuntu 24.04 LTS | ipe | No fix yet | — |
| Ubuntu 22.04 LTS | ipe | No fix yet | — |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | ipe | No fix yet | — |
| Ubuntu 18.04 LTS | ipe | No fix yet | — |
| Ubuntu 16.04 LTS | ipe | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | poppler +8 | 0.12.4-3.el6_0.1 | RHSA-2010:0859 |
Advisories 1
- RHSA-2010:0859 Red Hat Security Advisory: poppler security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- [oss-security] 20101004 Re: CVE requests: Poppler, Quassel, Pyfribidi, Overkill, DocUtils, FireGPG, Wireshark mailing-list
- FEDORA-2010-15857 vendor-advisory
- RHSA-2010:0859 vendor-advisory
- 42357 third-party-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=639356
- MDVSA-2010:231 vendor-advisory
- SSA:2010-324-01 vendor-advisory
- FEDORA-2010-15911 vendor-advisory
- USN-1005-1 vendor-advisory
- FEDORA-2010-15981 vendor-advisory
- SUSE-SR:2010:024 vendor-advisory
- http://cgit.freedesktop.org/poppler/poppler/commit/?id=bf2055088a3a2d3bb3d3c37d464954ec1a25771f