Poppler: Heap-buffer-overflow
Affects popplerSource GCVE Database
0
Severity
MediumRated Medium by Threat Radar's AI analysis
Data as of 6 Nov 2026, 15:49 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
OSS-Fuzzpopplerpkg:generic/popplerOther threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
Description
A heap-buffer-overflow vulnerability was reported in the Poppler library related to the cairo_type1_font_subset_for_each_glyph function. The issue was identified by OSS-Fuzz and involves a read overflow in the heap memory during font subset processing.
References
Community reviews
Loading reviews…