What’s Vulnerable › Products

poppler vulnerabilities

97 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 15 published in the last 12 months.

Check whether your poppler version is affected

Exploited poppler vulnerabilities

• CVE-2021-30860 — Apple Multiple Products Integer Overflow Vulnerability

Latest poppler vulnerabilities

• CVE-2026-107705 — Poppler 0.42.0 through 26.10.0 Stack Buffer Overflow via Decrypt::revision6Hash() (CVSS 6.5)
• CVE-2026-102621 — Freedesktop Poppler SplashClip.cc clipToPath integer overflow (CVSS 3.3)
• CVE-2026-102620 — Freedesktop Poppler FoFiTrueType.cc cvtSfnts integer overflow (CVSS 3.3)
• CVE-2026-93314 — Freedesktop Poppler FoFiTrueType.cc mapCodeToGID integer overflow (CVSS 6.3)
• CVE-2026-93313 — Freedesktop Poppler JBIG2Stream.cc readCodeTableSeg integer overflow (CVSS 6.3)
• CVE-2026-93312 — Freedesktop Poppler JBIG2Stream.cc rewind null pointer dereference (CVSS 4.3)
• CVE-2026-93311 — Freedesktop Poppler SampledFunction Function.cc integer overflow (CVSS 4.3)
• CVE-2025-52885 — GHSL-2025-042: Poppler has Use-After-Free (CVSS 6.1)
• CVE-2025-43718 — (CVSS 2.9)
• CVE-2025-50420 — (CVSS 6.5)
• CVE-2025-52886 — Poppler Use After Free Vulnerability (CVSS 5.9)
• CVE-2025-43903 — (CVSS 3.3)
• CVE-2025-32365 — (CVSS 7.1)
• CVE-2025-32364 — (CVSS 5.5)
• CVE-2024-56378 — (CVSS 4.3)
• CVE-2024-6239 — Poppler: pdfinfo: crash in broken documents when using -dests parameter (CVSS 7.5)
• CVE-2022-38349 — (CVSS 6.5)
• CVE-2022-37052 — (CVSS 6.5)
• CVE-2022-37051 — (CVSS 6.5)
• CVE-2022-37050 — (CVSS 6.5)
• CVE-2020-23804 — (CVSS 7.5)
• CVE-2020-18839 — (CVSS 6.5)
• CVE-2020-36024 — (CVSS 5.5)
• CVE-2020-36023 — (CVSS 6.5)
• CVE-2023-34872 — (CVSS 5.5)