CVE catalog

CVE-2018-13988

poppler: CVE-2018-13988

[CVE catalog]

Severity
Medium · CVSS 5.3CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Published
Source
[NVD] · [CVE record]
EPSS
3.11% · Oct 25, 2026

Poppler through 0.62 contains an out of bounds read vulnerability due to an incorrect memory access that is not mapped in its memory space, as demonstrated by pdfunite. This can result in memory corruption and denial of service. This may be exploitable when a victim opens a specially crafted PDF file.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianpopplersid26.07.0-3fixed
Debianpopplerforky26.07.0-3fixed
Debianpopplertrixie25.03.0-5+deb13u4fixed
Debianpopplertrixie-security25.03.0-5+deb13u3fixed
Debianpopplerbookworm22.12.0-2+deb12u2fixed
Debianpopplerbookworm-security22.12.0-2+deb12u3fixed
Ubuntupoppler14.040.24.1-0ubuntu1vulnerable
Ubuntupoppler14.040.24.3-0ubuntu1vulnerable
Ubuntupoppler14.040.24.3-0ubuntu2vulnerable
Ubuntupoppler14.040.24.3-0ubuntu3vulnerable
Ubuntupoppler14.040.24.3-0ubuntu4vulnerable
Ubuntupoppler14.040.24.3-0ubuntu5vulnerable
Ubuntupoppler14.040.24.3-0ubuntu6vulnerable
Ubuntupoppler14.040.24.3-0ubuntu7vulnerable
Ubuntupoppler14.040.24.3-0ubuntu8vulnerable
Ubuntupoppler14.040.24.3-0ubuntu10vulnerable
Ubuntupoppler14.040.24.3-0ubuntu12vulnerable
Ubuntupoppler14.040.24.5-0ubuntu3vulnerable
Ubuntupoppler14.040.24.5-2ubuntu1vulnerable
Ubuntupoppler14.040.24.5-2ubuntu2vulnerable
Ubuntupoppler14.040.24.5-2ubuntu4vulnerable
Ubuntupoppler14.040.24.5-2ubuntu4.1vulnerable
Ubuntupoppler14.040.24.5-2ubuntu4.2vulnerable
Ubuntupoppler14.040.24.5-2ubuntu4.3vulnerable
Ubuntupoppler14.040.24.5-2ubuntu4.4vulnerable
Ubuntupoppler14.040.24.5-2ubuntu4.5vulnerable
Ubuntupoppler14.040.24.5-2ubuntu4.6vulnerable
Ubuntupoppler14.040.24.5-2ubuntu4.7vulnerable
Ubuntupoppler14.040.24.5-2ubuntu4.8vulnerable
Ubuntupoppler14.040.24.5-2ubuntu4.9vulnerable
Ubuntupoppler14.040.24.5-2ubuntu4.11vulnerable
Ubuntupoppler14.040.24.5-2ubuntu4.12fixed
Ubuntupoppler16.040.33.0-0ubuntu3vulnerable
Ubuntupoppler16.040.37.0-0ubuntu1vulnerable
Ubuntupoppler16.040.38.0-0ubuntu1vulnerable
Ubuntupoppler16.040.41.0-0ubuntu1vulnerable
Ubuntupoppler16.040.41.0-0ubuntu1.1vulnerable
Ubuntupoppler16.040.41.0-0ubuntu1.2vulnerable
Ubuntupoppler16.040.41.0-0ubuntu1.3vulnerable
Ubuntupoppler16.040.41.0-0ubuntu1.4vulnerable
Ubuntupoppler16.040.41.0-0ubuntu1.5vulnerable
Ubuntupoppler16.040.41.0-0ubuntu1.6vulnerable
Ubuntupoppler16.040.41.0-0ubuntu1.7vulnerable
Ubuntupoppler16.040.41.0-0ubuntu1.8fixed
Ubuntupoppler18.040.57.0-2ubuntu4vulnerable
Ubuntupoppler18.040.57.0-2ubuntu5vulnerable
Ubuntupoppler18.040.62.0-1ubuntu1vulnerable
Ubuntupoppler18.040.62.0-2ubuntu1vulnerable
Ubuntupoppler18.040.62.0-2ubuntu2vulnerable
Ubuntupoppler18.040.62.0-2ubuntu2.1vulnerable
Ubuntupoppler18.040.62.0-2ubuntu2.2fixed
Ubuntupoppler14.040.24.1-0ubuntu1vulnerable
Ubuntupoppler14.040.24.3-0ubuntu1vulnerable
Ubuntupoppler14.040.24.3-0ubuntu2vulnerable
Ubuntupoppler14.040.24.3-0ubuntu3vulnerable
Ubuntupoppler14.040.24.3-0ubuntu4vulnerable
Ubuntupoppler14.040.24.3-0ubuntu5vulnerable
Ubuntupoppler14.040.24.3-0ubuntu6vulnerable
Ubuntupoppler14.040.24.3-0ubuntu7vulnerable
Ubuntupoppler14.040.24.3-0ubuntu8vulnerable
Ubuntupoppler14.040.24.3-0ubuntu10vulnerable
Ubuntupoppler14.040.24.3-0ubuntu12vulnerable
Ubuntupoppler14.040.24.5-0ubuntu3vulnerable
Ubuntupoppler14.040.24.5-2ubuntu1vulnerable
Ubuntupoppler14.040.24.5-2ubuntu2vulnerable
Ubuntupoppler14.040.24.5-2ubuntu4vulnerable
Ubuntupoppler14.040.24.5-2ubuntu4.1vulnerable
Ubuntupoppler14.040.24.5-2ubuntu4.2vulnerable
Ubuntupoppler14.040.24.5-2ubuntu4.3vulnerable
Ubuntupoppler14.040.24.5-2ubuntu4.4vulnerable
Ubuntupoppler14.040.24.5-2ubuntu4.5vulnerable
Ubuntupoppler14.040.24.5-2ubuntu4.6vulnerable
Ubuntupoppler14.040.24.5-2ubuntu4.7vulnerable
Ubuntupoppler14.040.24.5-2ubuntu4.8vulnerable
Ubuntupoppler14.040.24.5-2ubuntu4.9vulnerable
Ubuntupoppler14.040.24.5-2ubuntu4.11vulnerable
Ubuntupoppler14.040.24.5-2ubuntu4.12fixed
Ubuntupoppler16.040.33.0-0ubuntu3vulnerable
Ubuntupoppler16.040.37.0-0ubuntu1vulnerable
Ubuntupoppler16.040.38.0-0ubuntu1vulnerable
Ubuntupoppler16.040.41.0-0ubuntu1vulnerable
Ubuntupoppler16.040.41.0-0ubuntu1.1vulnerable
Ubuntupoppler16.040.41.0-0ubuntu1.2vulnerable
Ubuntupoppler16.040.41.0-0ubuntu1.3vulnerable
Ubuntupoppler16.040.41.0-0ubuntu1.4vulnerable
Ubuntupoppler16.040.41.0-0ubuntu1.5vulnerable
Ubuntupoppler16.040.41.0-0ubuntu1.6vulnerable
Ubuntupoppler16.040.41.0-0ubuntu1.7vulnerable
Ubuntupoppler16.040.41.0-0ubuntu1.8fixed
Ubuntupoppler18.040.57.0-2ubuntu4vulnerable
Ubuntupoppler18.040.57.0-2ubuntu5vulnerable
Ubuntupoppler18.040.62.0-1ubuntu1vulnerable
Ubuntupoppler18.040.62.0-2ubuntu1vulnerable
Ubuntupoppler18.040.62.0-2ubuntu2vulnerable
Ubuntupoppler18.040.62.0-2ubuntu2.1vulnerable
Ubuntupoppler18.040.62.0-2ubuntu2.2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianpopplersourcesid0.69.0-2lowNot reported[904922]
Debianpopplersourceforky0.69.0-2lowNot reported[904922]
Debianpopplersourcetrixie0.69.0-2lowNot reported[904922]
Debianpopplersourcebookworm0.69.0-2lowNot reported[904922]
Ubuntupopplerdeb14.040.24.5-2ubuntu4.12Not reportedUBUNTU-CVE-2018-13988Not reported
Ubuntupopplerdeb16.040.41.0-0ubuntu1.8Not reportedUBUNTU-CVE-2018-13988Not reported
Ubuntupopplerdeb18.040.62.0-2ubuntu2.2Not reportedUBUNTU-CVE-2018-13988Not reported
Ubuntupopplerdeb14.040.24.5-2ubuntu4.12Not reportedUSN-3757-1Not reported
Ubuntupopplerdeb16.040.41.0-0ubuntu1.8Not reportedUSN-3757-1Not reported
Ubuntupopplerdeb18.040.62.0-2ubuntu2.2Not reportedUSN-3757-1Not reported

[Debian bug #904922]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • Source package: [poppler]

    Details (4)
    • 22.12.0-2+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

    • 22.12.0-2+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

    • 22.12.0-2+deb12u3 · amd64 · bookworm-security

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

    • 22.12.0-2+deb12u3 · arm64 · bookworm-security

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

  • [libpoppler126]Unknown

    Source package: [poppler]

    Details (4)
    • 22.12.0-2+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

    • 22.12.0-2+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

    • 22.12.0-2+deb12u3 · amd64 · bookworm-security

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

    • 22.12.0-2+deb12u3 · arm64 · bookworm-security

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

  • Source package: [poppler]

    Details (4)
    • 22.12.0-2+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

    • 22.12.0-2+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

    • 22.12.0-2+deb12u3 · amd64 · bookworm-security

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

    • 22.12.0-2+deb12u3 · arm64 · bookworm-security

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

  • Source package: [poppler]

    Details (4)
    • 22.12.0-2+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

    • 22.12.0-2+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

    • 22.12.0-2+deb12u3 · amd64 · bookworm-security

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

    • 22.12.0-2+deb12u3 · arm64 · bookworm-security

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

  • Source package: [poppler]

    Details (4)
    • 22.12.0-2+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

    • 22.12.0-2+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

    • 22.12.0-2+deb12u3 · amd64 · bookworm-security

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

    • 22.12.0-2+deb12u3 · arm64 · bookworm-security

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

  • Source package: [poppler]

    Details (4)
    • 22.12.0-2+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

    • 22.12.0-2+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

    • 22.12.0-2+deb12u3 · amd64 · bookworm-security

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

    • 22.12.0-2+deb12u3 · arm64 · bookworm-security

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

  • Source package: [poppler]

    Details (4)
    • 22.12.0-2+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

    • 22.12.0-2+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

    • 22.12.0-2+deb12u3 · amd64 · bookworm-security

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

    • 22.12.0-2+deb12u3 · arm64 · bookworm-security

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

  • Source package: [poppler]

    Details (4)
    • 22.12.0-2+deb12u2 · all · bookworm

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

    • 22.12.0-2+deb12u2 · all · bookworm

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

    • 22.12.0-2+deb12u3 · all · bookworm-security

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

    • 22.12.0-2+deb12u3 · all · bookworm-security

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

  • Source package: [poppler]

    Details (4)
    • 22.12.0-2+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

    • 22.12.0-2+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

    • 22.12.0-2+deb12u3 · amd64 · bookworm-security

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

    • 22.12.0-2+deb12u3 · arm64 · bookworm-security

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

  • Source package: [poppler]

    Details (4)
    • 22.12.0-2+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

    • 22.12.0-2+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

    • 22.12.0-2+deb12u3 · amd64 · bookworm-security

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

    • 22.12.0-2+deb12u3 · arm64 · bookworm-security

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

  • Source package: [poppler]

    Details (4)
    • 22.12.0-2+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

    • 22.12.0-2+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

    • 22.12.0-2+deb12u3 · amd64 · bookworm-security

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

    • 22.12.0-2+deb12u3 · arm64 · bookworm-security

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

  • Source package: [poppler]

    Details (4)
    • 22.12.0-2+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

    • 22.12.0-2+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

    • 22.12.0-2+deb12u3 · amd64 · bookworm-security

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

    • 22.12.0-2+deb12u3 · arm64 · bookworm-security

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

  • Source package: [poppler]

    Details (4)
    • 22.12.0-2+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

    • 22.12.0-2+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

    • 22.12.0-2+deb12u3 · amd64 · bookworm-security

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

    • 22.12.0-2+deb12u3 · arm64 · bookworm-security

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

  • [poppler-utils]Unknown

    Source package: [poppler]

    Details (4)
    • 22.12.0-2+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

    • 22.12.0-2+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

    • 22.12.0-2+deb12u3 · amd64 · bookworm-security

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

    • 22.12.0-2+deb12u3 · arm64 · bookworm-security

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · bookworm; dsa · poppler · debian · 12

[Debian 13 (Trixie)]

  • Source package: [poppler]

    Details (4)
    • 25.03.0-5+deb13u4 · amd64 · trixie

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · 13

    • 25.03.0-5+deb13u4 · arm64 · trixie

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · 13

    • 25.03.0-5+deb13u3 · amd64 · trixie-security

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · 13

    • 25.03.0-5+deb13u3 · arm64 · trixie-security

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · 13

  • [libpoppler147]Unknown

    Source package: [poppler]

    Details (4)
    • 25.03.0-5+deb13u4 · amd64 · trixie

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · 13

    • 25.03.0-5+deb13u4 · arm64 · trixie

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · 13

    • 25.03.0-5+deb13u3 · amd64 · trixie-security

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · 13

    • 25.03.0-5+deb13u3 · arm64 · trixie-security

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · 13

  • Source package: [poppler]

    Details (4)
    • 25.03.0-5+deb13u4 · amd64 · trixie

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · 13

    • 25.03.0-5+deb13u4 · arm64 · trixie

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · 13

    • 25.03.0-5+deb13u3 · amd64 · trixie-security

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · 13

    • 25.03.0-5+deb13u3 · arm64 · trixie-security

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · 13

  • Source package: [poppler]

    Details (4)
    • 25.03.0-5+deb13u4 · amd64 · trixie

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · 13

    • 25.03.0-5+deb13u4 · arm64 · trixie

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · 13

    • 25.03.0-5+deb13u3 · amd64 · trixie-security

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · 13

    • 25.03.0-5+deb13u3 · arm64 · trixie-security

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · 13

  • Source package: [poppler]

    Details (4)
    • 25.03.0-5+deb13u4 · amd64 · trixie

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · 13

    • 25.03.0-5+deb13u4 · arm64 · trixie

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · 13

    • 25.03.0-5+deb13u3 · amd64 · trixie-security

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · 13

    • 25.03.0-5+deb13u3 · arm64 · trixie-security

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · 13

  • Source package: [poppler]

    Details (4)
    • 25.03.0-5+deb13u4 · amd64 · trixie

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · 13

    • 25.03.0-5+deb13u4 · arm64 · trixie

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · 13

    • 25.03.0-5+deb13u3 · amd64 · trixie-security

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · 13

    • 25.03.0-5+deb13u3 · arm64 · trixie-security

      Fixed · Fixed: 0.69.0-2

      dsa · poppler · debian · 13

Next results

Observed:

References