A vulnerability in Outline.cc for Poppler prior to 23.06.0 allows a remote attacker to cause a Denial of Service (DoS) (crash) via a crafted PDF file in OutlineItem::open.
Max CVSS
5.5
EPSS Score
0.16%
Published
2023-07-31
Updated
2023-12-06
Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2022-38171 in Xpdf.
Max CVSS
7.8
EPSS Score
0.13%
Published
2022-08-30
Updated
2022-10-28
An issue was discovered in Poppler 22.08.0. There is a reachable assertion in Object.h, will lead to denial of service because PDFDoc::replacePageDict in PDFDoc.cc lacks a stream check before saving an embedded file.
Max CVSS
6.5
EPSS Score
0.05%
Published
2023-08-22
Updated
2023-08-28
Xpdf prior to version 4.04 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIG2Stream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2021-30860 (Apple CoreGraphics).
Max CVSS
7.8
EPSS Score
0.20%
Published
2022-08-22
Updated
2022-10-27
A reachable Object::getString assertion in Poppler 22.07.0 allows attackers to cause a denial of service due to a failure in markObject.
Max CVSS
6.5
EPSS Score
0.05%
Published
2023-08-22
Updated
2023-08-25
An issue was discovered in Poppler 22.07.0. There is a reachable abort which leads to denial of service because the main function in pdfunite.cc lacks a stream check before saving an embedded file.
Max CVSS
6.5
EPSS Score
0.05%
Published
2023-08-22
Updated
2023-12-08
In Poppler 22.07.0, PDFDoc::savePageAs in PDFDoc.c callows attackers to cause a denial-of-service (application crashes with SIGABRT) by crafting a PDF file in which the xref data structure is mishandled in getCatalog processing. Note that this vulnerability is caused by the incomplete patch of CVE-2018-20662.
Max CVSS
6.5
EPSS Score
0.05%
Published
2023-08-22
Updated
2023-12-08
A logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.
Max CVSS
6.5
EPSS Score
0.19%
Published
2022-05-05
Updated
2022-09-28

CVE-2021-30860

Known exploited
An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.6.2. Processing a maliciously crafted PDF may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
Max CVSS
7.8
EPSS Score
0.16%
Published
2021-08-24
Updated
2024-02-02
CISA KEV Added
2021-11-03
An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted .pdf file to FoFiType1C::convertToType1 function.
Max CVSS
5.5
EPSS Score
0.07%
Published
2023-08-11
Updated
2023-08-17
An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted .pdf file to FoFiType1C::cvtGlyph function.
Max CVSS
6.5
EPSS Score
0.07%
Published
2023-08-11
Updated
2023-09-27
** DISPUTED ** DCTStream::getChars in DCTStream.cc in Poppler 20.12.1 has a heap-based buffer overflow via a crafted PDF document. NOTE: later reports indicate that this only affects builds from Poppler git clones in late December 2020, not the 20.12.1 release. In this situation, it should NOT be considered a Poppler vulnerability. However, several third-party Open Source projects directly rely on Poppler git clones made at arbitrary times, and therefore the CVE remains useful to users of those projects.
Max CVSS
7.8
EPSS Score
0.09%
Published
2020-12-25
Updated
2020-12-30
A flaw was found in Poppler in the way certain PDF files were converted into HTML. A remote attacker could exploit this flaw by providing a malicious PDF file that, when processed by the 'pdftohtml' program, would crash the application causing a denial of service.
Max CVSS
7.5
EPSS Score
0.31%
Published
2020-12-03
Updated
2022-09-28
Uncontrolled Recursion in pdfinfo, and pdftops in poppler 0.89.0 allows remote attackers to cause a denial of service via crafted input.
Max CVSS
7.5
EPSS Score
0.08%
Published
2023-08-22
Updated
2023-12-08
An issue was discovered in Poppler through 0.78.0. There is a divide-by-zero error in the function SplashOutputDev::tilingPatternFill at SplashOutputDev.cc.
Max CVSS
7.5
EPSS Score
1.04%
Published
2019-08-01
Updated
2023-01-18
In Poppler through 0.76.1, there is a heap-based buffer over-read in JPXStream::init in JPEG2000Stream.cc via data with inconsistent heights or widths.
Max CVSS
8.8
EPSS Score
1.78%
Published
2019-05-23
Updated
2020-07-23
FontInfoScanner::scanFonts in FontInfo.cc in Poppler 0.75.0 has infinite recursion, leading to a call to the error function in Error.cc.
Max CVSS
6.5
EPSS Score
0.29%
Published
2019-04-08
Updated
2023-03-01
An issue was discovered in Poppler 0.74.0. There is a NULL pointer dereference in the function SplashClip::clipAALine at splash/SplashClip.cc.
Max CVSS
6.5
EPSS Score
0.67%
Published
2019-04-05
Updated
2019-06-18
An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function Splash::blitTransparent at splash/Splash.cc.
Max CVSS
8.8
EPSS Score
1.85%
Published
2019-04-05
Updated
2020-07-23
An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function PSOutputDev::checkPageSlice at PSOutputDev.cc.
Max CVSS
6.5
EPSS Score
0.75%
Published
2019-04-05
Updated
2019-06-18
The JPXStream::init function in Poppler 0.78.0 and earlier doesn't check for negative values of stream length, leading to an Integer Overflow, thereby making it possible to allocate a large memory chunk on the heap, with a size controlled by an attacker, as demonstrated by pdftocairo.
Max CVSS
6.5
EPSS Score
0.37%
Published
2019-07-22
Updated
2023-02-11
PDFDoc::markObject in PDFDoc.cc in Poppler 0.74.0 mishandles dict marking, leading to stack consumption in the function Dict::find() located at Dict.cc, which can (for example) be triggered by passing a crafted pdf file to the pdfunite binary.
Max CVSS
6.5
EPSS Score
0.85%
Published
2019-03-21
Updated
2023-02-11
Poppler 0.74.0 has a heap-based buffer over-read in the CairoRescaleBox.cc downsample_row_box_filter function.
Max CVSS
9.8
EPSS Score
1.02%
Published
2019-03-08
Updated
2020-07-23
An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readTextRegion() located in JBIG2Stream.cc, can be triggered by sending a crafted pdf file to (for example) the pdfimages binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact. This is related to JBIG2Bitmap::clearToZero.
Max CVSS
8.8
EPSS Score
0.30%
Published
2019-03-01
Updated
2021-07-21
An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readGenericBitmap() located in JBIG2Stream.cc, can be triggered by sending a crafted pdf file to (for example) the pdfseparate binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact. This is related to JArithmeticDecoder::decodeBit.
Max CVSS
8.8
EPSS Score
0.70%
Published
2019-03-01
Updated
2021-07-21
80 vulnerabilities found
1 2 3 4
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!