Freedesktop vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2026-107705 Poppler 0.42.0 through 26.10.0 contains a stack-based buffer overflow in Decrypt::revision6Hash() that allows attackers controlling the password to overwrite stHigh 8.3 · Oct 8, 2026
• CVE-2026-50292 In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code executHigh 7.4 · Jun 4, 2026
• CVE-2020-23804 Uncontrolled Recursion in pdfinfo, and pdftops in poppler 0.89.0 allows remote attackers to cause a denial of service via crafted input.High 7.5 · Aug 22, 2023
• CVE-2022-4055 When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that shouHigh 7.4 · Nov 18, 2022
• CVE-2022-38784 Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc).High 7.8 · Aug 29, 2022
• CVE-2022-31782 ftbench.c in FreeType Demo Programs through 2.12.1 has a heap-based buffer overflow.High 7.8 · Jun 2, 2022
• CVE-2022-1215 A format string vulnerability was found in libinputHigh 7.8 · Jun 2, 2022
• CVE-2015-1877 The open_generic_xdg_mime function in xdg-open in xdg-utils 1.1.0 rc1 in Debian, when using dash, does not properly handle local variables, which allows remote High 8.8 · Jun 2, 2021
• CVE-2020-35512 A use-after-free flaw was found in D-Bus Development branch <= 1.13.16, dbus-1.12.x stable branch <= 1.12.18, and dbus-1.10.x and older branches <= 1.10.30 whenHigh 7.8 · Feb 15, 2021
• CVE-2021-3185 A flaw was found in the gstreamer h264 component of gst-plugins-bad before v1.18.1 where when parsing a h264 header, an attacker could cause the stack to be smaCritical 9.8 · Jan 26, 2021
• CVE-2020-35702 DCTStream::getChars in DCTStream.cc in Poppler 20.12.1 has a heap-based buffer overflow via a crafted PDF document.High 7.8 · Dec 24, 2020
• CVE-2020-27778 A flaw was found in Poppler in the way certain PDF files were converted into HTML.High 7.5 · Dec 3, 2020
• CVE-2018-21009 Poppler before 0.66.0 has an integer overflow in Parser::makeStream in Parser.cc.High 8.8 · Sep 5, 2019
• CVE-2019-14494 An issue was discovered in Poppler through 0.78.0.High 7.5 · Aug 1, 2019
• CVE-2019-12749 dbus before 1.10.28, 1.12.x before 1.12.16, and 1.13.x before 1.13.12, as used in DBusServer in Canonical Upstart in Ubuntu 14.04 (and in some, less common, useHigh 7.1 · Jun 11, 2019
• CVE-2019-12293 In Poppler through 0.76.1, there is a heap-based buffer over-read in JPXStream::init in JPEG2000Stream.cc via data with inconsistent heights or widths.High 8.8 · May 23, 2019
• CVE-2019-10872 An issue was discovered in Poppler 0.74.0.High 8.8 · Apr 5, 2019
• CVE-2019-9631 Poppler 0.74.0 has a heap-based buffer over-read in the CairoRescaleBox.cc downsample_row_box_filter function.Critical 9.8 · Mar 8, 2019
• CVE-2019-9545 An issue was discovered in Poppler 0.74.0.High 8.8 · Mar 1, 2019
• CVE-2019-9543 An issue was discovered in Poppler 0.74.0.High 8.8 · Mar 1, 2019
• CVE-2019-9200 A heap-based buffer underwrite exists in ImageStream::getLine() located at Stream.cc in Poppler 0.74.0 that can (for example) be triggered by sending a crafted High 8.8 · Feb 26, 2019
• CVE-2019-7310 In Poppler 0.73.0, a heap-based buffer over-read (due to an integer signedness error in the XRef::getEntry function in XRef.cc) allows remote attackers to causeHigh 7.8 · Feb 2, 2019
• CVE-2018-17336 UDisks 2.8.0 has a format string vulnerability in udisks_log in udiskslogging.c, allowing attackers to obtain sensitive information (stack contents), cause a deHigh 7.8 · Sep 22, 2018
• CVE-2017-18266 The open_envvar function in xdg-open in xdg-utils before 1.1.3 does not validate strings before launching the program specified by the BROWSER environment variaHigh 8.8 · May 10, 2018
• CVE-2017-1000456 freedesktop.org libpoppler 0.60.1 fails to validate boundaries in TextPool::addWord, leading to overflow in subsequent calculations.High 8.8 · Jan 2, 2018