Known vulnerabilities in Poppler 20.08.0

Software: Poppler
Version: 20.08.0
Software CPE: cpe:2.3:a:freedesktop_org:poppler:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 13
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Poppler version 20.08.0 Poppler 20.08.0 is affected by 13 vulnerabilities: 3 high, 8 medium, 2 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117378 - Use After Free
CVE-2025-52885
CWE-416 High
No
No
25.10.0 20.10.2025 SB2025102018
SB2025102032
SB2025102033
and 13 more
#VU114081 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2025-50420
CWE-835 Medium
Public exploit available
No
25.08.0 14.08.2025 SB2025081426
SB2025081430
SB2025081431
and 24 more
#VU113638 - Use After Free
CVE-2025-52886
CWE-416 High
No
No
25.06.0 05.08.2025 SB2025080522
SB2025080523
SB2025080534
and 3 more
#VU108758 - Improper Verification of Cryptographic Signature
CVE-2025-43903
CWE-347 Low
No
No
25.04.0 07.05.2025 SB2025050736
SB2025050740
SB2025050743
and 6 more
#VU107605 - Out-of-bounds read
CVE-2025-32365
CWE-125 Medium
No
No
25.04.0 18.04.2025 SB2025041811
SB2025041815
SB2025041816
and 24 more
#VU107604 - Incorrect Calculation
CVE-2025-32364
CWE-682 Low
No
No
25.04.0 18.04.2025 SB2025041811
SB2025041815
SB2025041816
and 12 more
#VU101977 - Out-of-bounds read
CVE-2024-56378
CWE-125 Medium
No
No
25.01.0 29.12.2024 SB2024122902
SB2024122904
SB2024122905
and 11 more
#VU93868 - Improper input validation
CVE-2024-6239
CWE-20 Medium
No
No
24.06.1 08.07.2024 SB2024070886
SB2024070896
SB2024070897
and 10 more
#VU79770 - NULL Pointer Dereference
CVE-2020-36024
CWE-476 Medium
No
No
- 21.08.2023 SB2023082124
SB2023082127
SB2023103150
and 9 more
#VU79769 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-36023
CWE-835 Medium
No
No
- 21.08.2023 SB2023082124
SB2023082127
SB2023102450
and 4 more
#VU78933 - Improper input validation
CVE-2023-34872
CWE-20 Medium
No
No
23.06.0 03.08.2023 SB2023080367
SB2023080368
SB2023103180
and 7 more
#VU67055 - Integer overflow
CVE-2022-38784
CWE-190 High
No
No
22.08.0 07.09.2022 SB2022090713
SB2022090716
SB2022091306
and 17 more
#VU67054 - Improper input validation
CVE-2022-27337
CWE-20 Medium
No
No
22.03.0 07.09.2022 SB2022090712
SB2022090716
SB2022110855
and 14 more