Poppler vulnerabilities

CVEs per yearBy the year they were published

1. 20174
2. 20193
3. 20201
4. 20252
5. 20261

Newest CVEs

• CVE-2026-12600

  Uncontrolled memory usage in Innodata Labs’ Poppler JPX decoder

  Poppler · Innodata Labs

  High8.7
• CVE-2025-52885

  GHSL-2025-042: Poppler has Use-After-Free

  poppler · poppler

  Medium6.1
• CVE-2025-52886

  Poppler Use After Free Vulnerability

  poppler · poppler

  Medium5.5
• CVE-2012-2142

  The error function in Error.cc in poppler before 0.21.4 allows remote attackers to execute arbitrary commands via a PDF containing an escape sequence for a…

  poppler · poppler

  High7.8
• CVE-2010-4654

  poppler before 0.16.3 has malformed commands that may cause corruption of the internal stack.

  poppler · poppler

  High7.8
• CVE-2010-4653

  An integer overflow condition in poppler before 0.16.3 can occur when parsing CharCodes for fonts.

  poppler · poppler

  Medium6.5
• CVE-2010-0207

  In xpdf, the xref table contains an infinite loop which allows remote attackers to cause a denial of service (application crash) in xpdf-based PDF viewers.

  poppler · poppler

  Medium5.5
• CVE-2017-2820

  An exploitable integer overflow vulnerability exists in the JPEG 2000 image parsing functionality of freedesktop.org Poppler 0.53.0. A specially crafted PDF…

  Poppler · Poppler

  High8.8
• CVE-2017-2818

  An exploitable heap overflow vulnerability exists in the image rendering functionality of Poppler 0.53.0. A specifically crafted PDF can cause an overly large…

  Poppler · Poppler

  High7.5
• CVE-2017-2814

  An exploitable heap overflow vulnerability exists in the image rendering functionality of Poppler 0.53.0. A specifically crafted pdf can cause an image…

  Poppler · Poppler

  High7.5