https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 12:18:01 +0000 https://cve.radiocsirt.org/vuln/bdu:2015-00990 bdu:2015-00990 https://cve.radiocsirt.org/vuln/bdu:2015-00990 https://cve.radiocsirt.org/vuln/certa-2009-avi-448 certa-2009-avi-448 https://cve.radiocsirt.org/vuln/certa-2009-avi-448 https://cve.radiocsirt.org/vuln/euvd-2026-124221 EUVD-2026-124221 https://cve.radiocsirt.org/vuln/euvd-2026-124221 https://cve.radiocsirt.org/vuln/fkie_cve-2009-3604 <p>The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x, as used in GPdf and kdegraphics KPDF, does not properly allocate memory, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document that triggers a NULL pointer dereference or a heap-based buffer overflow.</p> <p>The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x, as used in GPdf and kdegraphics KPDF, does not properly allocate memory, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document that triggers a NULL pointer dereference or a heap-based buffer overflow.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2009-3604 https://cve.radiocsirt.org/vuln/ghsa-57v7-6q2r-896j <p>The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x, as used in GPdf and kdegraphics KPDF, does not properly allocate memory, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document that triggers a NULL pointer dereference or a heap-based buffer overflow.</p> <p>The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x, as used in GPdf and kdegraphics KPDF, does not properly allocate memory, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document that triggers a NULL pointer dereference or a heap-based buffer overflow.</p> https://cve.radiocsirt.org/vuln/ghsa-57v7-6q2r-896j https://cve.radiocsirt.org/vuln/gsd-2009-3604 gsd-2009-3604 https://cve.radiocsirt.org/vuln/gsd-2009-3604 https://cve.radiocsirt.org/vuln/rhsa-2009:0480 <p>xpdf: Multiple buffer overflows in JBIG2 decoder (setBitmap, readSymbolDictSeg) (CVE-2009-0195) xpdf: Multiple integer overflows in JBIG2 decoder xpdf: Freeing of potentially uninitialized memory in JBIG2 decoder xpdf: Multiple buffer overflows in JBIG2 decoder (setBitmap, readSymbolDictSeg) (CVE-2009-0195) xpdf: multiple integer overflows PDF JBIG2 decoder OOB read PDF JBIG2 multiple input validation flaws PDF JBIG2 integer overflow PDF JBIG2 invalid free() PDF JBIG2 NULL dereference PDF JBIG2 MMR decoder buffer overflows PDF JBIG2 MMR infinite loop DoS poppler CairoOutputDev integer overflow xpdf/poppler: SplashBitmap integer overflow xpdf/poppler: Splash:: drawImage integer overflow and missing allocation return value check xpdf/poppler: PSOutputDev:: doImageL1Sep integer overflow</p> <p>xpdf: Multiple buffer overflows in JBIG2 decoder (setBitmap, readSymbolDictSeg) (CVE-2009-0195) xpdf: Multiple integer overflows in JBIG2 decoder xpdf: Freeing of potentially uninitialized memory in JBIG2 decoder xpdf: Multiple buffer overflows in JBIG2 decoder (setBitmap, readSymbolDictSeg) (CVE-2009-0195) xpdf: multiple integer overflows PDF JBIG2 decoder OOB read PDF JBIG2 multiple input validation flaws PDF JBIG2 integer overflow PDF JBIG2 invalid free() PDF JBIG2 NULL dereference PDF JBIG2 MMR decoder buffer overflows PDF JBIG2 MMR infinite loop DoS poppler CairoOutputDev integer overflow xpdf/poppler: SplashBitmap integer overflow xpdf/poppler: Splash:: drawImage integer overflow and missing allocation return value check xpdf/poppler: PSOutputDev:: doImageL1Sep integer overflow</p> https://cve.radiocsirt.org/vuln/rhsa-2009:0480 https://cve.radiocsirt.org/vuln/ubuntu-cve-2009-3604 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: ipe, Ubuntu:18.04:LTS: ipe, Ubuntu:20.04:LTS: ipe, Ubuntu:22.04:LTS: ipe, Ubuntu:24.04:LTS: ipe, Ubuntu:25.10: ipe, Ubuntu:26.04:LTS: ipe</p> <p>The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x, as used in GPdf and kdegraphics KPDF, does not properly allocate memory, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document that triggers a NULL pointer dereference or a heap-based buffer overflow.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: ipe, Ubuntu:18.04:LTS: ipe, Ubuntu:20.04:LTS: ipe, Ubuntu:22.04:LTS: ipe, Ubuntu:24.04:LTS: ipe, Ubuntu:25.10: ipe, Ubuntu:26.04:LTS: ipe</p> <p>The Splash::drawImage function in Splash.cc in Xpdf 2.x and 3.x before 3.02pl4, and Poppler 0.x, as used in GPdf and kdegraphics KPDF, does not properly allocate memory, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document that triggers a NULL pointer dereference or a heap-based buffer overflow.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2009-3604