poppler — Vulnerabilities & Security Advisories 11

Poppler is a widely used C++ library for rendering PDF documents, primarily integrated into applications requiring PDF processing capabilities. Historically, it has been susceptible to multiple remote code execution vulnerabilities due to issues in parsing PDF structures, along with cross-site scripting flaws and privilege escalation risks through maliciously crafted files. The library's complex parsing logic has frequently introduced memory corruption bugs, leading to 10 documented CVEs. While no major public security incidents have been widely reported, the consistent discovery of critical flaws in PDF parsing components highlights ongoing risks for applications relying on this library for handling untrusted document inputs.