freedesktop Poppler vulnerabilities

CVEs per yearBy the year they were published

1. 20254
2. 20267

Newest CVEs

• CVE-2026-107705

  Poppler 0.42.0 through 26.10.0 Stack Buffer Overflow via Decrypt::revision6Hash()

  freedesktop · poppler

  High8.3
• CVE-2026-102621

  Freedesktop Poppler SplashClip.cc clipToPath integer overflow

  Freedesktop · Poppler

  Medium4.8
• CVE-2026-102620

  Freedesktop Poppler FoFiTrueType.cc cvtSfnts integer overflow

  Freedesktop · Poppler

  Medium4.8
• CVE-2026-93314

  Freedesktop Poppler FoFiTrueType.cc mapCodeToGID integer overflow

  Freedesktop · Poppler

  Medium5.3
• CVE-2026-93313

  Freedesktop Poppler JBIG2Stream.cc readCodeTableSeg integer overflow

  Freedesktop · Poppler

  Medium5.3
• CVE-2026-93312

  Freedesktop Poppler JBIG2Stream.cc rewind null pointer dereference

  Freedesktop · Poppler

  Medium5.3
• CVE-2026-93311

  Freedesktop Poppler SampledFunction Function.cc integer overflow

  Freedesktop · Poppler

  Medium5.3
• CVE-2025-43718

  Poppler 24.06.1 through 25.x before 25.04.0 allows stack consumption and a SIGSEGV via deeply nested structures within the metadata (such as GTS_PDFEVersion)…

  freedesktop · Poppler

  Low2.9
• CVE-2025-43903

  NSSCryptoSignBackend.cc in Poppler before 25.04.0 does not verify the adbe.pkcs7.sha1 signatures on documents, resulting in potential signature forgeries.

  freedesktop · Poppler

  Medium4.3
• CVE-2025-32365

  Poppler before 25.04.0 allows crafted input files to trigger out-of-bounds reads in the JBIG2Bitmap::combine function in JBIG2Stream.cc because of a misplaced…

  freedesktop · Poppler

  Medium4.0