https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 12:12:19 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-371940 EUVD-2026-371940 https://cve.radiocsirt.org/vuln/euvd-2026-371940 https://cve.radiocsirt.org/vuln/fkie_cve-2026-93653 <p>A denial of service flaw was found in Poppler&#39;s Splash backend. A crafted PDF with tiling-pattern geometry approaching the int32 boundary can cause SplashOutputDev::tilingPatternFill to compute an attacker-controlled repeat count that drives an excessively long loop in the pattern-fill scanline routine, without a corresponding memory allocation. An attacker could exploit this by supplying a malicious PDF to an application that renders it via Poppler&#39;s Splash backend, causing the rendering process to consume 100% CPU for an attacker-controlled, extended duration.</p> <p>A denial of service flaw was found in Poppler&#39;s Splash backend. A crafted PDF with tiling-pattern geometry approaching the int32 boundary can cause SplashOutputDev::tilingPatternFill to compute an attacker-controlled repeat count that drives an excessively long loop in the pattern-fill scanline routine, without a corresponding memory allocation. An attacker could exploit this by supplying a malicious PDF to an application that renders it via Poppler&#39;s Splash backend, causing the rendering process to consume 100% CPU for an attacker-controlled, extended duration.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-93653 https://cve.radiocsirt.org/vuln/ghsa-84rg-5qf5-cx44 <p>A denial of service flaw was found in Poppler&#39;s Splash backend. A crafted PDF with tiling-pattern geometry approaching the int32 boundary can cause SplashOutputDev::tilingPatternFill to compute an attacker-controlled repeat count that drives an excessively long loop in the pattern-fill scanline routine, without a corresponding memory allocation. An attacker could exploit this by supplying a malicious PDF to an application that renders it via Poppler&#39;s Splash backend, causing the rendering process to consume 100% CPU for an attacker-controlled, extended duration.</p> <p>A denial of service flaw was found in Poppler&#39;s Splash backend. A crafted PDF with tiling-pattern geometry approaching the int32 boundary can cause SplashOutputDev::tilingPatternFill to compute an attacker-controlled repeat count that drives an excessively long loop in the pattern-fill scanline routine, without a corresponding memory allocation. An attacker could exploit this by supplying a malicious PDF to an application that renders it via Poppler&#39;s Splash backend, causing the rendering process to consume 100% CPU for an attacker-controlled, extended duration.</p> https://cve.radiocsirt.org/vuln/ghsa-84rg-5qf5-cx44 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-93653 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: poppler, Ubuntu:Pro:18.04:LTS: poppler, Ubuntu:Pro:20.04:LTS: poppler, Ubuntu:22.04:LTS: poppler, Ubuntu:24.04:LTS: poppler, Ubuntu:26.04:LTS: poppler</p> <p>A denial of service flaw was found in Poppler&#39;s Splash backend. A crafted PDF with tiling-pattern geometry approaching the int32 boundary can cause SplashOutputDev::tilingPatternFill to compute an attacker-controlled repeat count that drives an excessively long loop in the pattern-fill scanline routine, without a corresponding memory allocation. An attacker could exploit this by supplying a malicious PDF to an application that renders it via Poppler&#39;s Splash backend, causing the rendering process to consume 100% CPU for an attacker-controlled, extended duration.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: poppler, Ubuntu:Pro:18.04:LTS: poppler, Ubuntu:Pro:20.04:LTS: poppler, Ubuntu:22.04:LTS: poppler, Ubuntu:24.04:LTS: poppler, Ubuntu:26.04:LTS: poppler</p> <p>A denial of service flaw was found in Poppler&#39;s Splash backend. A crafted PDF with tiling-pattern geometry approaching the int32 boundary can cause SplashOutputDev::tilingPatternFill to compute an attacker-controlled repeat count that drives an excessively long loop in the pattern-fill scanline routine, without a corresponding memory allocation. An attacker could exploit this by supplying a malicious PDF to an application that renders it via Poppler&#39;s Splash backend, causing the rendering process to consume 100% CPU for an attacker-controlled, extended duration.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-93653 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3465 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in poppler ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in poppler ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3465