Known vulnerabilities in poppler (Red Hat package)

Vendor: Red Hat Inc.
Software: poppler (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:poppler_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 13
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting poppler (Red Hat package) poppler (Red Hat package) is affected by 13 known vulnerabilities: 2 high, 6 medium, 5 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU107605 - Out-of-bounds read
CVE-2025-32365		 CWE-125 Medium
No
No
 0.66.0-26.el8_2.1, 20.11.0-2.el8_4.2, 20.11.0-5.el8_6, 20.11.0-7.el8_8, 20.11.0-13.el8_10, 21.01.0-13.el9_0, 21.01.0-15.el9_2, 21.01.0-20.el9_4, 21.01.0-22.el9_6, 21.01.0-23.el9_7, 24.02.0-7.el10_0, 24.02.0-7.el10_1 18.04.2025 SB2025041811
SB2025041815
SB2025041816
and 24 more
#VU93868 - Improper input validation
CVE-2024-6239		 CWE-20 Medium
No
No
 21.01.0-21.el9 08.07.2024 SB2024070886
SB2024070896
SB2024070897
and 10 more
#VU82603 - Access of Uninitialized Pointer
CVE-2020-27778		 CWE-824 Low
No
No
 20.11.0-2.el8 31.10.2023 SB2019090505
SB2021101517
SB2021051956
and 2 more
#VU79770 - NULL Pointer Dereference
CVE-2020-36024		 CWE-476 Medium
No
No
 20.11.0-11.el8 21.08.2023 SB2023082124
SB2023082127
SB2023103150
and 9 more
#VU67055 - Integer overflow
CVE-2022-38784		 CWE-190 High
No
No
 20.11.0-6.el8, 21.01.0-14.el9 07.09.2022 SB2022090713
SB2022090716
SB2022091306
and 17 more
#VU67054 - Improper input validation
CVE-2022-27337		 CWE-20 Medium
No
No
 20.11.0-5.el8, 21.01.0-13.el9 07.09.2022 SB2022090712
SB2022090716
SB2022110855
and 14 more
#VU29244 - Access of Uninitialized Pointer
CVE-2019-11459		 CWE-824 Low
No
No
 0.26.5-42.el7 25.06.2020 SB2019042313
SB2020071719
SB2019100321
and 8 more
#VU20888 - Integer overflow
CVE-2018-21009		 CWE-190 High
No
No
 0.26.5-42.el7 05.09.2019 SB2019090505
SB2020071719
SB2020040196
and 4 more
#VU20053 - Divide By Zero
CVE-2019-14494		 CWE-369 Low
No
No
 0.26.5-43.el7, 0.66.0-27.el8 12.08.2019 SB2019080101
SB2019081204
SB2020093030
and 5 more
#VU19598 - Out-of-bounds read
CVE-2019-10871		 CWE-125 Low
No
No
 0.26.5-42.el7 01.08.2019 SB2019040512
SB2019091040
SB2020071719
and 6 more
#VU19596 - Out-of-bounds read
CVE-2019-12293		 CWE-125 Low
No
No
 0.26.5-42.el7 01.08.2019 SB2019052309
SB2019091040
SB2020071719
and 6 more
#VU19570 - Integer overflow
CVE-2019-9959		 CWE-190 Medium
No
No
 0.26.5-42.el7 31.07.2019 SB2019080101
SB2019091040
SB2020071719
and 6 more
#VU33071 - Heap-based Buffer Overflow
CVE-2015-8868		 CWE-122 Medium
No
No
 0.26.5-16.el7 06.05.2016 SB2016050603
SB2016060205
SB2016111804
and 4 more