<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://cve.radiocsirt.org/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-15T17:08:16.568785+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>csirt@opendfir.org</email>
  </author>
  <link href="https://cve.radiocsirt.org" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/alsa-2026:0126</id>
    <title>ALSA-2026:0126 — Moderate: poppler security update</title>
    <updated>2026-10-15T17:08:16.591587+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> AlmaLinux:9: poppler, AlmaLinux:9: poppler-cpp, AlmaLinux:9: poppler-cpp-devel, AlmaLinux:9: poppler-devel, AlmaLinux:9: poppler-glib, AlmaLinux:9: poppler-glib-devel, AlmaLinux:9: poppler-glib-doc, AlmaLinux:9: poppler-qt5, AlmaLinux:9: poppler-qt5-devel, AlmaLinux:9: poppler-utils</p>
<p>Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.</p>
<p>Security Fix(es):</p>
<p>* poppler: Out-of-Bounds Read in Poppler (CVE-2025-32365)</p>
<p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/alsa-2026:0126"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/bdu:2025-06078</id>
    <title>bdu:2025-06078</title>
    <updated>2026-10-15T17:08:16.591668+00:00</updated>
    <content>bdu:2025-06078</content>
    <link href="https://cve.radiocsirt.org/vuln/bdu:2025-06078"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/bell-cve-2025-32365</id>
    <title>BELL-CVE-2025-32365</title>
    <updated>2026-10-15T17:08:16.591689+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p><strong>Affected:</strong> Alpaquita:stream: poppler</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/bell-cve-2025-32365"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/euvd-2026-257908</id>
    <title>EUVD-2026-257908</title>
    <updated>2026-10-15T17:08:16.591708+00:00</updated>
    <content>EUVD-2026-257908</content>
    <link href="https://cve.radiocsirt.org/vuln/euvd-2026-257908"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/fkie_cve-2025-32365</id>
    <title>fkie_cve-2025-32365</title>
    <updated>2026-10-15T17:08:16.591720+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Poppler before 25.04.0 allows crafted input files to trigger out-of-bounds reads in the JBIG2Bitmap::combine function in JBIG2Stream.cc because of a misplaced isOk check.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/fkie_cve-2025-32365"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ghsa-r4rq-7765-p57x</id>
    <title>GHSA-r4rq-7765-p57x</title>
    <updated>2026-10-15T17:08:16.591741+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Poppler before 25.04.0 allows crafted input files to trigger out-of-bounds reads in the JBIG2Bitmap::combine function in JBIG2Stream.cc because of a misplaced isOk check.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ghsa-r4rq-7765-p57x"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/oesa-2025-1390</id>
    <title>OESA-2025-1390 — poppler security update</title>
    <updated>2026-10-15T17:08:16.591756+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: poppler, openEuler:22.03-LTS-SP3: poppler, openEuler:22.03-LTS-SP4: poppler, openEuler:24.03-LTS: poppler, openEuler:24.03-LTS-SP1: poppler</p>
<p>is a PDF rendering library.

Security Fix(es):</p>
<p>A floating-point exception in the PSStack::roll function of Poppler before 25.04.0 can cause an application to crash when handling malformed inputs associated with INT_MIN.(CVE-2025-32364)</p>
<p>Poppler before 25.04.0 allows crafted input files to trigger out-of-bounds reads in the JBIG2Bitmap::combine function in JBIG2Stream.cc because of a misplaced isOk check.(CVE-2025-32365)</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/oesa-2025-1390"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/opensuse-su-2025:14976-1</id>
    <title>openSUSE-SU-2025:14976-1 — libpoppler-cpp2-25.04.0-1.1 on GA media</title>
    <updated>2026-10-15T17:08:16.591786+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>libpoppler-cpp2-25.04.0-1.1 on GA media</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/opensuse-su-2025:14976-1"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/rhsa-2026:0772</id>
    <title>RHSA-2026:0772 — Red Hat Security Advisory: poppler security update</title>
    <updated>2026-10-15T17:08:16.591804+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>poppler: Out-of-Bounds Read in Poppler</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/rhsa-2026:0772"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/suse-su-2025:01780-1</id>
    <title>SUSE-SU-2025:01780-1 — Security update for poppler</title>
    <updated>2026-10-15T17:08:16.591820+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Security update for poppler</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/suse-su-2025:01780-1"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-32365</id>
    <title>UBUNTU-CVE-2025-32365</title>
    <updated>2026-10-15T17:08:16.591834+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: poppler, Ubuntu:Pro:18.04:LTS: poppler, Ubuntu:20.04:LTS: poppler, Ubuntu:22.04:LTS: poppler, Ubuntu:24.04:LTS: poppler</p>
<p>Poppler before 25.04.0 allows crafted input files to trigger out-of-bounds reads in the JBIG2Bitmap::combine function in JBIG2Stream.cc because of a misplaced isOk check.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-32365"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0713</id>
    <title>WID-SEC-W-2025-0713 — poppler: Mehrere Schwachstellen ermöglichen Denial of Service</title>
    <updated>2026-10-15T17:08:16.591857+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Ein lokaler Angreifer kann mehrere Schwachstellen in poppler ausnutzen, um einen Denial of Service Angriff durchzuführen.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0713"/>
  </entry>
</feed>
