https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T23:00:15.406460+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:2259 ALSA-2023:2259 — Moderate: poppler security and bug fix update 2026-10-05T23:00:15.645264+00:00

Affected: AlmaLinux:9: poppler, AlmaLinux:9: poppler-cpp, AlmaLinux:9: poppler-cpp-devel, AlmaLinux:9: poppler-devel, AlmaLinux:9: poppler-glib, AlmaLinux:9: poppler-glib-devel, AlmaLinux:9: poppler-qt5, AlmaLinux:9: poppler-qt5-devel, AlmaLinux:9: poppler-utils

Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.

Security Fix(es):

* poppler: integer overflow in JBIG2 decoder using malformed files (CVE-2022-38784)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2022-05993 bdu:2022-05993 2026-10-05T23:00:15.645333+00:00 bdu:2022-05993 https://cve.radiocsirt.org/vuln/bell-cve-2022-38784 Withdrawn: BELL-CVE-2022-38784 — CVE-2022-38784 does not affect BellSoft software 2026-10-05T23:00:15.645350+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/euvd-2026-184773 EUVD-2026-184773 2026-10-05T23:00:15.645365+00:00 EUVD-2026-184773 https://cve.radiocsirt.org/vuln/fkie_cve-2022-38784 fkie_cve-2022-38784 2026-10-05T23:00:15.645376+00:00

Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2022-38171 in Xpdf.

 https://cve.radiocsirt.org/vuln/ghsa-5557-33mq-5995 GHSA-5557-33mq-5995 2026-10-05T23:00:15.645397+00:00

Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2022-38171 in Xpdf.

 https://cve.radiocsirt.org/vuln/gsd-2022-38784 gsd-2022-38784 2026-10-05T23:00:15.645412+00:00 gsd-2022-38784 https://cve.radiocsirt.org/vuln/oesa-2022-1906 OESA-2022-1906 — poppler security update 2026-10-05T23:00:15.645421+00:00

Affected: openEuler:20.03-LTS-SP1: poppler, openEuler:20.03-LTS-SP3: poppler, openEuler:22.03-LTS: poppler

Poppler is a free software utility library for rendering Portable Document Format (PDF) documents. \Its development is supported by freedesktop.org. It is commonly used on Linux systems,and is used by \the PDF viewers of the open source GNOME and KDE desktop environments. Security Fix(es): Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2022-38171 in Xpdf.(CVE-2022-38784)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12362-1 openSUSE-SU-2024:12362-1 — libpoppler-cpp0-22.09.0-1.1 on GA media 2026-10-05T23:00:15.645447+00:00

libpoppler-cpp0-22.09.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhba-2024:8405 RHBA-2024:8405 — Red Hat Bug Fix Advisory: Updated rhel8/gimp-flatpak container image 2026-10-05T23:00:15.645472+00:00

poppler: integer overflow in JBIG2 decoder using malformed files

 https://cve.radiocsirt.org/vuln/suse-su-2023:0480-1 SUSE-SU-2023:0480-1 — Security update for poppler 2026-10-05T23:00:15.645488+00:00

Security update for poppler

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-38784 UBUNTU-CVE-2022-38784 2026-10-05T23:00:15.645502+00:00

Affected: Ubuntu:Pro:16.04:LTS: poppler, Ubuntu:16.04:LTS: emscripten, Ubuntu:18.04:LTS: poppler, Ubuntu:18.04:LTS: emscripten, Ubuntu:20.04:LTS: poppler, Ubuntu:22.04:LTS: emscripten, Ubuntu:22.04:LTS: poppler, Ubuntu:24.04:LTS: emscripten, Ubuntu:25.10: emscripten, Ubuntu:26.04:LTS: emscripten

Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2022-38171 in Xpdf.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1214 WID-SEC-W-2022-1214 — poppler: Schwachstelle ermöglicht Codeausführung 2026-10-05T23:00:15.645532+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in poppler ausnutzen, um beliebigen Programmcode auszuführen und einen Denial of Service Zustand zu verursachen.