https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T12:18:03.792423+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2015-00990 bdu:2015-00990 2026-10-03T12:18:03.809753+00:00 bdu:2015-00990 https://cve.radiocsirt.org/vuln/certa-2009-avi-448 certa-2009-avi-448 — Plusieurs vulnérabilités dans <span class="textit">Xpdf</span> et dans des applications qui en reprennent le code sourc… 2026-10-03T12:18:03.809794+00:00 certa-2009-avi-448 https://cve.radiocsirt.org/vuln/euvd-2026-124221 EUVD-2026-124221 2026-10-03T12:18:03.809813+00:00 EUVD-2026-124221 https://cve.radiocsirt.org/vuln/fkie_cve-2009-3604 fkie_cve-2009-3604 2026-10-03T12:18:03.809826+00:00

The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x, as used in GPdf and kdegraphics KPDF, does not properly allocate memory, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document that triggers a NULL pointer dereference or a heap-based buffer overflow.

 https://cve.radiocsirt.org/vuln/ghsa-57v7-6q2r-896j GHSA-57v7-6q2r-896j 2026-10-03T12:18:03.809856+00:00

The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x, as used in GPdf and kdegraphics KPDF, does not properly allocate memory, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document that triggers a NULL pointer dereference or a heap-based buffer overflow.

 https://cve.radiocsirt.org/vuln/gsd-2009-3604 gsd-2009-3604 2026-10-03T12:18:03.809872+00:00 gsd-2009-3604 https://cve.radiocsirt.org/vuln/rhsa-2009:0480 RHSA-2009:0480 — Red Hat Security Advisory: poppler security update 2026-10-03T12:18:03.809884+00:00

xpdf: Multiple buffer overflows in JBIG2 decoder (setBitmap, readSymbolDictSeg) (CVE-2009-0195) xpdf: Multiple integer overflows in JBIG2 decoder xpdf: Freeing of potentially uninitialized memory in JBIG2 decoder xpdf: Multiple buffer overflows in JBIG2 decoder (setBitmap, readSymbolDictSeg) (CVE-2009-0195) xpdf: multiple integer overflows PDF JBIG2 decoder OOB read PDF JBIG2 multiple input validation flaws PDF JBIG2 integer overflow PDF JBIG2 invalid free() PDF JBIG2 NULL dereference PDF JBIG2 MMR decoder buffer overflows PDF JBIG2 MMR infinite loop DoS poppler CairoOutputDev integer overflow xpdf/poppler: SplashBitmap integer overflow xpdf/poppler: Splash:: drawImage integer overflow and missing allocation return value check xpdf/poppler: PSOutputDev:: doImageL1Sep integer overflow

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2009-3604 UBUNTU-CVE-2009-3604 2026-10-03T12:18:03.809926+00:00

Affected: Ubuntu:16.04:LTS: ipe, Ubuntu:18.04:LTS: ipe, Ubuntu:20.04:LTS: ipe, Ubuntu:22.04:LTS: ipe, Ubuntu:24.04:LTS: ipe, Ubuntu:25.10: ipe, Ubuntu:26.04:LTS: ipe

The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x, as used in GPdf and kdegraphics KPDF, does not properly allocate memory, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document that triggers a NULL pointer dereference or a heap-based buffer overflow.