Poppler

Products

ProductCVEsExploitedLatest
poppler2–Oct 10, 2025
Innodata Labs1–Aug 25, 2026

Exploited and recent CVEs

  • CVE-2026-12600 High 8.7 Uncontrolled memory usage in Innodata Labs’ Poppler JPX decoder 0.5%
  • CVE-2025-52885 Medium 6.1 GHSL-2025-042: Poppler has Use-After-Free 0.2%
  • CVE-2025-52886 Medium 5.5 Poppler Use After Free Vulnerability 0.4%