CVE-2002-0889: Qualcomm Qpopper

Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days.

Buffer overflow in Qpopper (popper) 4.0.4 and earlier allows local users to cause a denial of service and possibly execute arbitrary code via a long bulldir argument in the user's .qpopper-options configuration file.

Affected products

• Qualcomm Qpopper: version 4.0.3 only; version 4.0.4 only

Published 2002-10-04. Last modified 2026-06-16.