Known vulnerabilities in Poppler

Software: Poppler
Software CPE: cpe:2.3:a:freedesktop_org:poppler:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 75
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Poppler Poppler is affected by 75 known vulnerabilities: 13 high, 20 medium, 42 low Critical High Medium Low

Vulnerabilities (75)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117378 - Use After Free
CVE-2025-52885
CWE-416 High
No
No
25.10.0 20.10.2025 SB2025102018
SB2025102032
SB2025102033
and 13 more
#VU116637 - Uncontrolled Recursion
CVE-2025-43718
CWE-674 Medium
No
No
25.03.0 06.10.2025 SB2025100657
SB2025100660
SB2025100664
and 12 more
#VU114081 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2025-50420
CWE-835 Medium
Available
No
25.08.0 14.08.2025 SB2025081426
SB2025081430
SB2025081431
and 24 more
#VU113638 - Use After Free
CVE-2025-52886
CWE-416 High
No
No
25.06.0 05.08.2025 SB2025080522
SB2025080523
SB2025080534
and 3 more
#VU108758 - Improper Verification of Cryptographic Signature
CVE-2025-43903
CWE-347 Low
No
No
25.04.0 07.05.2025 SB2025050736
SB2025050740
SB2025050743
and 6 more
#VU107605 - Out-of-bounds read
CVE-2025-32365
CWE-125 Medium
No
No
25.04.0 18.04.2025 SB2025041811
SB2025041815
SB2025041816
and 24 more
#VU107604 - Incorrect Calculation
CVE-2025-32364
CWE-682 Low
No
No
25.04.0 18.04.2025 SB2025041811
SB2025041815
SB2025041816
and 12 more
#VU101977 - Out-of-bounds read
CVE-2024-56378
CWE-125 Medium
No
No
25.01.0 29.12.2024 SB2024122902
SB2024122904
SB2024122905
and 11 more
#VU93868 - Improper input validation
CVE-2024-6239
CWE-20 Medium
No
No
24.06.1 08.07.2024 SB2024070886
SB2024070896
SB2024070897
and 10 more
#VU82600 - Reachable Assertion
CVE-2022-38349
CWE-617 Low
No
No
22.09.0 31.10.2023 SB2023103149
SB2023103150
SB2023103151
and 11 more
#VU82599 - Reachable Assertion
CVE-2022-37051
CWE-617 Low
No
No
22.08.0 31.10.2023 SB2023103148
SB2023103151
SB2023103152
and 8 more
#VU82598 - Improper input validation
CVE-2022-37050
CWE-20 Low
No
No
22.08.0 31.10.2023 SB2023103148
SB2023103151
SB2023103152
and 10 more
#VU82597 - Reachable Assertion
CVE-2022-37052
CWE-617 Low
No
No
22.08.0 31.10.2023 SB2023103148
SB2023103156
SB2023110334
and 9 more
#VU81718 - Uncontrolled Recursion
CVE-2020-23804
CWE-674 Medium
No
No
0.90.0 10.10.2023 SB2023101001
SB2023101002
SB2023103152
and 9 more
#VU79770 - NULL Pointer Dereference
CVE-2020-36024
CWE-476 Medium
No
No
- 21.08.2023 SB2023082124
SB2023082127
SB2023103150
and 9 more
#VU79769 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-36023
CWE-835 Medium
No
No
- 21.08.2023 SB2023082124
SB2023082127
SB2023102450
and 4 more
#VU78933 - Improper input validation
CVE-2023-34872
CWE-20 Medium
No
No
23.06.0 03.08.2023 SB2023080367
SB2023080368
SB2023103180
and 7 more
#VU67055 - Integer overflow
CVE-2022-38784
CWE-190 High
No
No
22.08.0 07.09.2022 SB2022090713
SB2022090716
SB2022091306
and 17 more
#VU67054 - Improper input validation
CVE-2022-27337
CWE-20 Medium
No
No
22.03.0 07.09.2022 SB2022090712
SB2022090716
SB2022110855
and 14 more
#VU34879 - Improper input validation
CVE-2012-2142
CWE-20 High
No
No
0.21.4 09.01.2020 SB2020010944
SB2013082203
SB2013082204
and 2 more


Showing elements 1 - 20 out of 75