https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:05:04 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-02906 bdu:2026-02906 https://cve.radiocsirt.org/vuln/bdu:2026-02906 https://cve.radiocsirt.org/vuln/bell-cve-2025-52885 <p><strong>Affected:</strong> Alpaquita:23: poppler, Alpaquita:25: poppler, Alpaquita:stream: poppler</p> <p><strong>Affected:</strong> Alpaquita:23: poppler, Alpaquita:25: poppler, Alpaquita:stream: poppler</p> https://cve.radiocsirt.org/vuln/bell-cve-2025-52885 https://cve.radiocsirt.org/vuln/euvd-2026-259982 EUVD-2026-259982 https://cve.radiocsirt.org/vuln/euvd-2026-259982 https://cve.radiocsirt.org/vuln/fkie_cve-2025-52885 <p>Poppler ia a library for rendering PDF files, and examining or modifying their structure. A use-after-free (write) vulnerability has been detected in versions Poppler prior to 25.10.0 within the StructTreeRoot class. The issue arises from the use of raw pointers to elements of a `std::vector`, which can lead to dangling pointers when the vector is resized. The vulnerability stems from the way that refToParentMap stores references to `std::vector` elements using raw pointers. These pointers may become invalid when the vector is resized. This vulnerability is a common security problem involving the use of raw pointers to `std::vectors`. Internally, `std::vector `stores its elements in a dynamically allocated array. When the array reaches its capacity and a new element is added, the vector reallocates a larger block of memory and moves all the existing elements to the new location. At this point if any pointers to elements are stored before a resize occurs, they become dangling pointers once the reallocation happens. Version 25.10.0 contains a patch for the issue.</p> <p>Poppler ia a library for rendering PDF files, and examining or modifying their structure. A use-after-free (write) vulnerability has been detected in versions Poppler prior to 25.10.0 within the StructTreeRoot class. The issue arises from the use of raw pointers to elements of a `std::vector`, which can lead to dangling pointers when the vector is resized. The vulnerability stems from the way that refToParentMap stores references to `std::vector` elements using raw pointers. These pointers may become invalid when the vector is resized. This vulnerability is a common security problem involving the use of raw pointers to `std::vectors`. Internally, `std::vector `stores its elements in a dynamically allocated array. When the array reaches its capacity and a new element is added, the vector reallocates a larger block of memory and moves all the existing elements to the new location. At this point if any pointers to elements are stored before a resize occurs, they become dangling pointers once the reallocation happens. Version 25.10.0 contains a patch for the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-52885 https://cve.radiocsirt.org/vuln/oesa-2025-2479 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: poppler</p> <p>is a PDF rendering library. Security Fix(es):</p> <p>Poppler 24.06.1 through 25.x before 25.04.0 allows stack consumption and a SIGSEGV via deeply nested structures within the metadata (such as GTS_PDFEVersion) of a PDF document, e.g., a regular expression for a long pdfsubver string. This occurs in Dict::lookup, Catalog::getMetadata, and associated functions in PDFDoc, with deep recursion in the regex executor (std::__detail::_Executor).(CVE-2025-43718)</p> <p>Poppler is a library for rendering PDF files, and examining or modifying their structure. A use-after-free (write) vulnerability has been detected in versions Poppler prior to 25.10.0 within the StructTreeRoot class. The issue arises from the use of raw pointers to elements of a `std::vector`, which can lead to dangling pointers when the vector is resized. The vulnerability stems from the way that refToParentMap stores references to `std::vector` elements using raw pointers. These pointers may become invalid when the vector is resized. This vulnerability is a common security problem involving the use of raw pointers to `std::vectors`. Internally, `std::vector` stores its elements in a dynamically allocated array. When the array reaches its capacity and a new element is added, the vector reallocates a larger block of memory and moves all the existing elements to the new location. At this point if any pointers to elements are stored before a resize occurs, they become dangling pointers once the reallocation happens. Version 25.1…</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: poppler</p> <p>is a PDF rendering library. Security Fix(es):</p> <p>Poppler 24.06.1 through 25.x before 25.04.0 allows stack consumption and a SIGSEGV via deeply nested structures within the metadata (such as GTS_PDFEVersion) of a PDF document, e.g., a regular expression for a long pdfsubver string. This occurs in Dict::lookup, Catalog::getMetadata, and associated functions in PDFDoc, with deep recursion in the regex executor (std::__detail::_Executor).(CVE-2025-43718)</p> <p>Poppler is a library for rendering PDF files, and examining or modifying their structure. A use-after-free (write) vulnerability has been detected in versions Poppler prior to 25.10.0 within the StructTreeRoot class. The issue arises from the use of raw pointers to elements of a `std::vector`, which can lead to dangling pointers when the vector is resized. The vulnerability stems from the way that refToParentMap stores references to `std::vector` elements using raw pointers. These pointers may become invalid when the vector is resized. This vulnerability is a common security problem involving the use of raw pointers to `std::vectors`. Internally, `std::vector` stores its elements in a dynamically allocated array. When the array reaches its capacity and a new element is added, the vector reallocates a larger block of memory and moves all the existing elements to the new location. At this point if any pointers to elements are stored before a resize occurs, they become dangling pointers once the reallocation happens. Version 25.1…</p> https://cve.radiocsirt.org/vuln/oesa-2025-2479 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15648-1 <p>libpoppler-cpp2-25.09.1-2.1 on GA media</p> <p>libpoppler-cpp2-25.09.1-2.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:15648-1 https://cve.radiocsirt.org/vuln/rhsa-2026:7364 <p>poppler: Poppler stack overflow poppler: Use-After-Free in StructTreeRoot class</p> <p>poppler: Poppler stack overflow poppler: Use-After-Free in StructTreeRoot class</p> https://cve.radiocsirt.org/vuln/rhsa-2026:7364 https://cve.radiocsirt.org/vuln/suse-su-2025:21132-1 <p>Security update for poppler</p> <p>Security update for poppler</p> https://cve.radiocsirt.org/vuln/suse-su-2025:21132-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-52885 <p><strong>Affected:</strong> Ubuntu:Pro:20.04:LTS: poppler, Ubuntu:22.04:LTS: poppler, Ubuntu:24.04:LTS: poppler, Ubuntu:25.10: poppler</p> <p>Poppler ia a library for rendering PDF files, and examining or modifying their structure. A use-after-free (write) vulnerability has been detected in versions Poppler prior to 25.10.0 within the StructTreeRoot class. The issue arises from the use of raw pointers to elements of a `std::vector`, which can lead to dangling pointers when the vector is resized. The vulnerability stems from the way that refToParentMap stores references to `std::vector` elements using raw pointers. These pointers may become invalid when the vector is resized. This vulnerability is a common security problem involving the use of raw pointers to `std::vectors`. Internally, `std::vector `stores its elements in a dynamically allocated array. When the array reaches its capacity and a new element is added, the vector reallocates a larger block of memory and moves all the existing elements to the new location. At this point if any pointers to elements are stored before a resize occurs, they become dangling pointers once the reallocation happens. Version 25.10.0 contains a patch for the issue.</p> <p><strong>Affected:</strong> Ubuntu:Pro:20.04:LTS: poppler, Ubuntu:22.04:LTS: poppler, Ubuntu:24.04:LTS: poppler, Ubuntu:25.10: poppler</p> <p>Poppler ia a library for rendering PDF files, and examining or modifying their structure. A use-after-free (write) vulnerability has been detected in versions Poppler prior to 25.10.0 within the StructTreeRoot class. The issue arises from the use of raw pointers to elements of a `std::vector`, which can lead to dangling pointers when the vector is resized. The vulnerability stems from the way that refToParentMap stores references to `std::vector` elements using raw pointers. These pointers may become invalid when the vector is resized. This vulnerability is a common security problem involving the use of raw pointers to `std::vectors`. Internally, `std::vector `stores its elements in a dynamically allocated array. When the array reaches its capacity and a new element is added, the vector reallocates a larger block of memory and moves all the existing elements to the new location. At this point if any pointers to elements are stored before a resize occurs, they become dangling pointers once the reallocation happens. Version 25.10.0 contains a patch for the issue.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-52885 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2260 <p>Ein lokaler Angreifer kann eine Schwachstelle in poppler ausnutzen, um beliebigen Programmcode auszuführen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in poppler ausnutzen, um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2260