Vulnerabilities in Poppler
11 resultsCVE-2017-2820HIGHAn exploitable integer overflow vulnerability exists in the JPEG 2000 image parsing functionality of freedesktop.org Poppler 0.53.0. A speciEPSS 4.4%CVE-2017-2814HIGHAn exploitable heap overflow vulnerability exists in the image rendering functionality of Poppler 0.53.0. A specifically crafted pdf can cauEPSS 3.0%CVE-2012-2142—The error function in Error.cc in poppler before 0.21.4 allows remote attackers to execute arbitrary commands via a PDF containing an escapeEPSS 2.9%CVE-2017-2818HIGHAn exploitable heap overflow vulnerability exists in the image rendering functionality of Poppler 0.53.0. A specifically crafted PDF can cauEPSS 2.0%CVE-2010-4653—An integer overflow condition in poppler before 0.16.3 can occur when parsing CharCodes for fonts.EPSS 1.8%CVE-2010-4654—poppler before 0.16.3 has malformed commands that may cause corruption of the internal stack.EPSS 1.2%CVE-2017-7511—poppler since version 0.17.3 has been vulnerable to NULL pointer dereference in pdfunite triggered by specially crafted documents.EPSS 1.1%CVE-2010-0207—In xpdf, the xref table contains an infinite loop which allows remote attackers to cause a denial of service (application crash) in xpdf-basEPSS 0.8%CVE-2026-12600HIGHUncontrolled memory usage in Innodata Labs’ Poppler JPX decoderEPSS 0.5%CVE-2025-52886MEDIUMPoppler Use After Free VulnerabilityEPSS 0.4%CVE-2025-52885MEDIUMGHSL-2025-042: Poppler has Use-After-FreeEPSS 0.2%