- How many CVEs does poppler have?
- poppler has 98 published CVE records since 2006, including 15 in the last two years.
- How many poppler CVEs are in CISA KEV?
- Yes — 1 of poppler's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
- Which poppler products have the most CVEs?
- The poppler products with the most published CVEs are poppler, Innodata Labs, Poppler Pdfinfo utility.
- What are the most common weakness types in poppler CVEs?
- poppler's CVEs most often map to these CWE weakness types: CWE-190 (Integer Overflow or Wraparound), CWE-189, CWE-125 (Out-of-bounds Read), CWE-476 (NULL Pointer Dereference).
- Are there public exploits for poppler vulnerabilities?
- Yes — 63 of poppler's CVEs have a known public exploit.
- How many critical poppler vulnerabilities are there?
- poppler has 8 critical and 27 high-severity CVEs.
- What is the average severity of poppler CVEs?
- The average CVSS base score across poppler's scored CVEs is 6.7.