Poppler vulnerabilities
We track 1 vulnerability in Poppler products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 25, 2026.
1vulnerabilities
0critical
1high
0exploited
8.7average CVSS score
Latest Poppler vulnerabilities
- 8.7 High severity
Innodata Labs: Uncontrolled Resource Consumption
Denial-of-service (DoS) vulnerability in the internal JPEG2000 (JPX) decoding implementation of the Poppler fork developed by Innodata Labs. When an application processes an untrusted PDF file containing specially crafted JPXDecode images, a remote attacker ca