Poppler
- Total products in the ecosystem
- 2
- Total vulnerabilities (90 days)
- 1
en
Verify to analyze this security profile
As of 09/19/2026, Poppler recorded 1 security vulnerabilities in the last 90 days across 1 products, including 1 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, Innodata Labs had the most security vulnerabilities in the Poppler ecosystem, with 1 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-12600Uncontrolled memory usage in Innodata Labs’ Poppler JPX decoder | Exploitation statusNot known exploited | FixYes | Affected productInnodata Labs | Published08/25/2026 | SeverityHigh |
CVE-2025-52885GHSL-2025-042: Poppler has Use-After-Free | Exploitation statusNot known exploited | FixNot confirmed | Affected productpoppler | Published10/10/2025 | SeverityMedium |
CVE-2025-52886Poppler Use After Free Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productpoppler | Published07/02/2025 | SeverityMedium |
CVE-2012-2142 | Exploitation statusNot confirmed | FixNot confirmed | Affected productpoppler | Published01/09/2020 | SeverityUnknown |
CVE-2010-4654 | Exploitation statusNot confirmed | FixNot confirmed | Affected productpoppler | Published11/13/2019 | SeverityUnknown |
CVE-2010-4653 | Exploitation statusNot confirmed | FixNot confirmed | Affected productpoppler | Published11/13/2019 | SeverityUnknown |
CVE-2010-0207 | Exploitation statusNot confirmed | FixNot confirmed | Affected productpoppler | Published10/30/2019 | SeverityUnknown |
CVE-2017-2814 | Exploitation statusNot confirmed | FixNot confirmed | Affected productpoppler | Published07/12/2017 | SeverityHigh |
CVE-2017-2818 | Exploitation statusNot confirmed | FixNot confirmed | Affected productpoppler | Published07/12/2017 | SeverityHigh |
CVE-2017-2820 | Exploitation statusNot confirmed | FixNot confirmed | Affected productpoppler | Published07/12/2017 | SeverityHigh |
CVE-2017-7511 | Exploitation statusNot confirmed | FixNot confirmed | Affected productpoppler | Published05/30/2017 | SeverityUnknown |
CVE-2010-3703 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published11/05/2010 | SeverityUnknown |
CVE-2010-3704 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published11/05/2010 | SeverityUnknown |
CVE-2009-3938 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published11/13/2009 | SeverityUnknown |
CVE-2009-3605 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published11/02/2009 | SeverityUnknown |
CVE-2009-3609 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published10/21/2009 | SeverityUnknown |
CVE-2009-3606 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published10/21/2009 | SeverityUnknown |
CVE-2009-3604 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published10/21/2009 | SeverityUnknown |
CVE-2009-3608 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published10/21/2009 | SeverityUnknown |
CVE-2009-3603 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published10/21/2009 | SeverityUnknown |
CVE-2009-3607 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published10/21/2009 | SeverityUnknown |
CVE-2009-1187 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/23/2009 | SeverityUnknown |
CVE-2009-1188 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/23/2009 | SeverityUnknown |
CVE-2009-0800 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/23/2009 | SeverityUnknown |
CVE-2009-1183 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/23/2009 | SeverityUnknown |
CVE-2009-1179 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/23/2009 | SeverityUnknown |
CVE-2009-1182 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/23/2009 | SeverityUnknown |
CVE-2009-1181 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/23/2009 | SeverityUnknown |
CVE-2009-1180 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/23/2009 | SeverityUnknown |
CVE-2009-0166 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/23/2009 | SeverityUnknown |
CVE-2009-0799 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/23/2009 | SeverityUnknown |
CVE-2009-0756 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published03/03/2009 | SeverityUnknown |
CVE-2009-0755 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published03/03/2009 | SeverityUnknown |
CVE-2008-2950 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published07/07/2008 | SeverityUnknown |
CVE-2008-1693 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/18/2008 | SeverityUnknown |
CVE-2005-3625 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published01/06/2006 | SeverityUnknown |
CVE-2005-3626 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published01/06/2006 | SeverityUnknown |
CVE-2005-3624 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published01/06/2006 | SeverityUnknown |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan