Vulnerabilidades do Freedesktop Poppler

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Freedesktop Poppler: 3 registro(s), com versões afetadas e correções.
cpe:2.3:a:freedesktop:poppler

CVE-2026-107705 Média · 6.5 CWE-121 08/10/2026

Poppler 0.42.0 through 26.10.0 Stack Buffer Overflow via Decrypt::revision6Hash()

Poppler 0.42.0 through 26.10.0 contains a stack-based buffer overflow in Decrypt::revision6Hash() that allows attackers controlling the password to overwrite stack memory when opening AESV3/R6 encrypted PDFs. Attackers can supply a password longer than 127 bytes through applications using the libpoppler, libpoppler-glib or C++ API to overflow the K1 and E buffers, crashing the process or corrupting memory.

CVE-2025-43718 Baixa · 2.9 CWE-674 01/10/2025

Uncontrolled Recursion em Freedesktop Poppler

Poppler 24.06.1 through 25.x before 25.04.0 allows stack consumption and a SIGSEGV via deeply nested structures within the metadata (such as GTS_PDFEVersion) of a PDF document, e.g., a regular expression for a long pdfsubver string. This occurs in Dict::lookup, Catalog::getMetadata, and associated functions in PDFDoc, with deep recursion in the regex executor (std::__detail::_Executor).

CVE-2021-30860 Alta · 7.8 KEV Alta · 62 Exploit público CWE-190 24/08/2021

Apple Multiple Products Integer Overflow Vulnerability

An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.6.2. Processing a maliciously crafted PDF may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.