Most recent entries from all

bdu:2025-11408

EUVD-2026-250817

fkie_cve-2025-50422

Cairo through 1.18.4, as used in Poppler through 25.08.0, has an "unscaled->face == NULL" assertion failure for _cairo_ft_unscaled_font_fini in cairo-ft-font.c.

GHSA-6f98-2v97-grfv

An issue was discovered in freedesktop poppler v25.04.0. The heap memory containing PDF stream objects is not cleared upon program exit, allowing attackers to obtain sensitive PDF content via a memory dump.

msrc_CVE-2025-50422 — Cairo through 1.18.4, as used in Poppler through 25.08.0, has an "unscaled->face == NULL" assertion failure for _cairo_…

msrc_CVE-2025-50422

OESA-2025-2732 — cairo security update

Affected: openEuler:24.03-LTS-SP1: cairo

Cairo is a 2D graphics libarary with support for multiple output devices. It provides high-quality display and print output and this package also contains functionality to make cairo graphics library integrate well with GObject used by GNOME. Security Fix(es):

Cairo through 1.18.4, as used in Poppler through 25.08.0, has an "unscaled->face == NULL" assertion failure for _cairo_ft_unscaled_font_fini in cairo-ft-font.c.(CVE-2025-50422)

openSUSE-SU-2025:15457-1 — cairo-devel-1.18.4-3.1 on GA media

cairo-devel-1.18.4-3.1 on GA media

SUSE-SU-2025:02843-1 — Security update for cairo

Security update for cairo

UBUNTU-CVE-2025-50422

Affected: Ubuntu:Pro:16.04:LTS: cairo, Ubuntu:Pro:18.04:LTS: cairo, Ubuntu:Pro:20.04:LTS: cairo, Ubuntu:22.04:LTS: cairo, Ubuntu:24.04:LTS: cairo, Ubuntu:25.10: cairo, Ubuntu:26.04:LTS: cairo

Cairo through 1.18.4, as used in Poppler through 25.08.0, has an "unscaled->face == NULL" assertion failure for _cairo_ft_unscaled_font_fini in cairo-ft-font.c.

WID-SEC-W-2025-1706 — poppler: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in poppler ausnutzen, um einen Denial of Service Angriff durchzuführen und um sensible Informationen offenzulegen.