Vulnerabilities

TI-2026-69737 CVE-2026-107705

Stack buffer overflow in Poppler PDF password handling

LOW 36

Poppler 0.42.0 through 26.10.0 contains a stack-based buffer overflow in Decrypt::revision6Hash() that allows attackers controlling the password to overwrite stack memory when opening AESV3/R6 encrypted PDFs.

CVSS 4.0HIGH 8.3 Network No auth No interaction EPSS 0.00324 Published 2026-10-08 Partial fix CWE-121

TI-2026-65448 CVE-2026-102621 · GHSA-fxmp-c8v9-778f

Freedesktop Poppler SplashClip.cc clipToPath integer overflow

LOW 21

A vulnerability was identified in Freedesktop Poppler up to 26.08.0.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00112 Published 2026-09-29 Partial fix · 26.09.0 CWE-189

TI-2026-65447 CVE-2026-102620 · GHSA-j552-4gqh-7xmg

Freedesktop Poppler FoFiTrueType.cc cvtSfnts integer overflow

LOW 21

A vulnerability was determined in Freedesktop Poppler 26.06.0/26.07.0/26.08.0.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00115 Published 2026-09-29 Partial fix CWE-189

TI-2026-62925 CVE-2026-93314 · GHSA-2g5c-g4rf-f9jv

Freedesktop Poppler FoFiTrueType.cc mapCodeToGID integer overflow

MEDIUM 57

A vulnerability was determined in Freedesktop Poppler 26.07.0.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00244 Published 2026-09-18 Fixed CWE-189

TI-2026-62924 CVE-2026-93313 · GHSA-xj93-32pj-8pfj

Freedesktop Poppler JBIG2Stream.cc readCodeTableSeg integer overflow

MEDIUM 57

A vulnerability was found in Freedesktop Poppler 26.07.0.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00244 Published 2026-09-18 Fixed CWE-189

TI-2026-62923 CVE-2026-93312 · GHSA-mm25-wh7f-mmv7

Freedesktop Poppler JBIG2Stream.cc rewind null pointer dereference

MEDIUM 57

A flaw has been found in Freedesktop Poppler 26.07.0.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00404 Published 2026-09-18 Fixed in 26.08.0 CWE-404

TI-2026-62922 CVE-2026-93311 · GHSA-9p2x-92wc-v6h2

Freedesktop Poppler SampledFunction Function.cc integer overflow

MEDIUM 63

A vulnerability was detected in Freedesktop Poppler 26.07.0.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00562 Published 2026-09-18 Fixed CWE-189

TI-2026-37034 CVE-2026-50292 · GHSA-jcq8-v68h-2c44

In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys…

HIGH 76

In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00313 Published 2026-06-04 Partial fix · 1.30.4, 1.31.3 CWE-93

TI-2026-34172 CVE-2026-46470 · GHSA-7jcp-9qq9-8rjq

An issue was discovered in GStreamer gst-plugins-good before 1.28.2.

LOW 39

An issue was discovered in GStreamer gst-plugins-good before 1.28.2.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00208 Published 2026-05-14 Fixed in 1.28.2 CWE-369

TI-2026-34171 CVE-2026-46469 · GHSA-f2c5-5798-qfvg

An issue was discovered in GStreamer gst-plugins-good before 1.28.2.

LOW 24

An issue was discovered in GStreamer gst-plugins-good before 1.28.2.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00101 Published 2026-05-14 Fixed in 1.28.2 CWE-369

TI-2026-27294 CVE-2026-35094 · GHSA-9pg8-4hvg-h64m

Libinput: libinput: information disclosure via dangling pointer in lua plugin handling

LOW 24

A flaw was found in libinput.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00146 Published 2026-04-01 No fix listed CWE-825

TI-2026-27293 CVE-2026-35093 · GHSA-mr79-hxw4-8vpf

Libinput: libinput: unauthorized code execution and information disclosure through lua bytecode plugins

LOW 39

A flaw was found in libinput.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.0018 Published 2026-04-01 Will not fix CWE-94

TI-2026-04267 CVE-2026-4897 · GHSA-v4jf-wwp4-588q

Polkit: polkit: denial of service via unbounded input processing through standard input

LOW 24

A flaw was found in polkit.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00156 Published 2026-03-26 Partial fix · 125-4.el10_2.1, 127-5.1.hum1 CWE-770

TI-2026-01603 CVE-2026-1940 · GHSA-9wvw-r6fm-6wwv

Gstreamer: incomplete fix of cve-2026-1940

LOW 32

An incomplete fix for CVE-2024-47778 allows an out-of-bounds read in gst_wavparse_adtl_chunk() function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00234 Published 2026-03-23 Fix deferred CWE-125

TI-2026-21098 CVE-2026-26104 · GHSA-hjgq-ff5j-5v2m

Udisks: missing authorization check allows unprivileged users to back up luks headers via udisks d-bus api

LOW 23

A flaw was found in the udisks storage management daemon that allows unprivileged users to back up LUKS encryption headers without authorization.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00082 Published 2026-02-25 Fixed in 2.10.90-6.el10_1.1, 2.10.90-5.el10_0.2 CWE-862

TI-2026-21097 CVE-2026-26103 · GHSA-fw7p-cggr-9xm6

Udisks: missing authorization check allows unprivileged users to restore luks headers via udisks d-bus api

LOW 30

A flaw was found in the udisks storage management daemon that exposes a privileged D-Bus API for restoring LUKS encryption headers without proper authorization checks.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00082 Published 2026-02-25 Fixed in 2.10.90-6.el10_1.1, 2.10.90-5.el10_0.2 CWE-862

TI-2025-28308 CVE-2025-43718 · GHSA-77h4-r63x-87f8

Uncontrolled recursion in Freedesktop Poppler

MEDIUM 48

Poppler 24.06.1 through 25.x before 25.04.0 allows stack consumption and a SIGSEGV via deeply nested structures within the metadata (such as GTS_PDFEVersion) of a PDF document, e.g., a regular expression for a long pdfsu…

CVSS 3.1LOW 2.9 Local No auth No interaction EPSS 0.00134 Published 2025-10-01 Partial fix · 25.04.0 CWE-674

TI-2025-32126 CVE-2025-50420 · GHSA-ppc9-vw33-pg6g

An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to…

MEDIUM 62

An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00374 Published 2025-08-04 No fix listed CWE-674

TI-2025-32922 CVE-2025-52886

Poppler Use After Free Vulnerability

LOW 25

Poppler is a PDF rendering library.

CVSS 4.0MEDIUM 5.5 Local No auth No interaction EPSS 0.00446 Published 2025-07-02 Partial fix · 25.06.0 CWE-416

TI-2025-32984 CVE-2025-52968 · GHSA-r9jv-cv83-m4v4

xdg-open in xdg-utils through 1.2.1 can send requests containing SameSite=Strict cookies…

LOW 13

xdg-open in xdg-utils through 1.2.1 can send requests containing SameSite=Strict cookies, which can facilitate CSRF.

CVSS 3.1LOW 2.7 Local No auth User interaction EPSS 0.00212 Published 2025-06-23 Fix deferred CWE-420

TI-2025-28470 CVE-2025-43903 · GHSA-4w9g-4h2x-7qxq

Improper signature verification in Freedesktop Poppler

LOW 19

NSSCryptoSignBackend.cc in Poppler before 25.04.0 does not verify the adbe.pkcs7.sha1 signatures on documents, resulting in potential signature forgeries.

CVSS 3.1MEDIUM 4.3 Local No auth No interaction EPSS 0.00112 Published 2025-04-18 Partial fix · 25.04.0 CWE-347

TI-2025-23445 CVE-2025-32365 · GHSA-r4rq-7765-p57x

Out-of-bounds read in Freedesktop Poppler

LOW 31

Poppler before 25.04.0 allows crafted input files to trigger out-of-bounds reads in the JBIG2Bitmap::combine function in JBIG2Stream.cc because of a misplaced isOk check.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00255 Published 2025-04-05 Partial fix · 25.04.0 CWE-125

TI-2025-23444 CVE-2025-32364 · GHSA-69gq-2xc5-f33j

Integer overflow in Freedesktop Poppler

LOW 24

A floating-point exception in the PSStack::roll function of Poppler before 25.04.0 can cause an application to crash when handling malformed inputs associated with INT_MIN.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00271 Published 2025-04-05 Partial fix · 25.04.0 CWE-190

TI-2024-37335 CVE-2024-56378 · GHSA-h369-f67q-2q4c

libpoppler.so in Poppler through 24.12.0 has an out-of-bounds read vulnerability within…

MEDIUM 53

libpoppler.so in Poppler through 24.12.0 has an out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00624 Published 2024-12-22 Will not fix CWE-125

TI-2024-05786 CVE-2024-6239 · GHSA-cc4h-7j78-49pj

Poppler: pdfinfo: crash in broken documents when using -dests parameter

LOW 34

A flaw was found in the Poppler's Pdfinfo utility.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00785 Published 2024-06-21 Partial fix · 20.11.0-12.el8_10, 21.01.0-21.el9 CWE-20

Vulnerabilities

Filters