Known vulnerabilities in poppler (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:poppler_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 10
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting poppler (Ubuntu package) poppler (Ubuntu package) is affected by 10 known vulnerabilities: 2 high, 3 medium, 5 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117378 - Use After Free
CVE-2025-52885
CWE-416 High
No
No
0.86.1-0ubuntu1.7+esm3, 22.02.0-2ubuntu0.12, 24.02.0-1ubuntu9.8, 25.03.0-3ubuntu1.4, 25.03.0-10ubuntu0.1 20.10.2025 SB2025102018
SB2025102032
SB2025102033
and 13 more
#VU116637 - Uncontrolled Recursion
CVE-2025-43718
CWE-674 Medium
No
No
22.02.0-2ubuntu0.11, 24.02.0-1ubuntu9.7, 25.03.0-3ubuntu1.3 06.10.2025 SB2025100657
SB2025100660
SB2025100664
and 12 more
#VU114081 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2025-50420
CWE-835 Medium
Available
No
0.41.0-0ubuntu1.16+esm8, 0.62.0-2ubuntu2.14+esm8, 0.86.1-0ubuntu1.7+esm2, 22.02.0-2ubuntu0.10, 24.02.0-1ubuntu9.6, 25.03.0-3ubuntu1.2 14.08.2025 SB2025081426
SB2025081430
SB2025081431
and 24 more
#VU113638 - Use After Free
CVE-2025-52886
CWE-416 High
No
No
0.41.0-0ubuntu1.16+esm7, 0.62.0-2ubuntu2.14+esm7, 0.86.1-0ubuntu1.7+esm1, 22.02.0-2ubuntu0.9, 24.02.0-1ubuntu9.5, 25.03.0-3ubuntu1.1 05.08.2025 SB2025080522
SB2025080523
SB2025080534
and 3 more
#VU67054 - Improper input validation
CVE-2022-27337
CWE-20 Medium
No
No
0.41.0-0ubuntu1.16+esm7, 0.62.0-2ubuntu2.14+esm7, 0.86.1-0ubuntu1.7+esm1 07.09.2022 SB2022090712
SB2022090716
SB2022110855
and 14 more
#VU20053 - Divide By Zero
CVE-2019-14494
CWE-369 Low
No
No
0.62.0-2ubuntu2.10, 0.74.0-0ubuntu1.3 12.08.2019 SB2019080101
SB2019081204
SB2020093030
and 5 more
#VU17370 - Out-of-bounds read
CVE-2019-7310
CWE-125 Low
No
No
0.24.5-2ubuntu4.16, 0.41.0-0ubuntu1.12, 0.62.0-2ubuntu2.7, 0.68.0-0ubuntu1.5 04.02.2019 SB2019020407
SB2019021215
SB2019021816
and 11 more
#VU16831 - Reachable Assertion
CVE-2018-20551
CWE-617 Low
No
No
0.24.5-2ubuntu4.16, 0.41.0-0ubuntu1.12, 0.62.0-2ubuntu2.7, 0.68.0-0ubuntu1.5 07.01.2019 SB2018122602
SB2019021816
SB2019091040
and 4 more
#VU16829 - Reachable Assertion
CVE-2018-20650
CWE-617 Low
No
No
0.24.5-2ubuntu4.15, 0.41.0-0ubuntu1.11, 0.62.0-2ubuntu2.6, 0.68.0-0ubuntu1.4 07.01.2019 SB2018122602
SB2019012206
SB2019080812
and 8 more
#VU16709 - NULL Pointer Dereference
CVE-2018-20481
CWE-476 Low
No
No
0.24.5-2ubuntu4.15, 0.41.0-0ubuntu1.11, 0.62.0-2ubuntu2.6, 0.68.0-0ubuntu1.4 26.12.2018 SB2018122602
SB2019012206
SB2019080812
and 8 more