CVE-2023-34872

概要

参考情報

• gitlab.freedesktop.org/poppler/poppler/-/commit/591235c8b6c65a2eee88991b9ae73490fd9afdfe · Patch
• gitlab.freedesktop.org/poppler/poppler/-/issues/1399 · Exploit
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3XXL3L6RJOTLGCN7GLH2OLLNF4FJ4T7I
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JQ3NYJ43U2MA7COKGMJDARZUAAOP45D4
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SFBT75QHBWNMSDAHSXZQ2I3PBJWID36K
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W3H3GOWFE3C7543GMEN7LY4GWMWJ7D2G
• lists.fedoraproject.org/archives/list/[email protected]/message/3XXL3L6RJOTLGCN7GLH2OLLNF4FJ4T7I
• lists.fedoraproject.org/archives/list/[email protected]/message/JQ3NYJ43U2MA7COKGMJDARZUAAOP45D4

poppler のその他の脆弱性

• CVE-2025-50420中 6.5An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted …
• CVE-2025-52886中 5.9Poppler is a PDF rendering library. Versions prior to 25.06.0 use `std::atomic_int` for reference counting. Because `std::atomic_int` is onl…
• CVE-2025-43903低 3.3NSSCryptoSignBackend.cc in Poppler before 25.04.0 does not verify the adbe.pkcs7.sha1 signatures on documents, resulting in potential signat…
• CVE-2025-32365高 7.1Poppler before 25.04.0 allows crafted input files to trigger out-of-bounds reads in the JBIG2Bitmap::combine function in JBIG2Stream.cc beca…
• CVE-2025-32364中 5.5A floating-point exception in the PSStack::roll function of Poppler before 25.04.0 can cause an application to crash when handling malformed…