CVE-2019-10872: Freedesktop Poppler

High severity, CVSS 8.8. EPSS: 2.7% chance of exploitation in the next 30 days.

An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function Splash::blitTransparent at splash/Splash.cc.

Affected products

• Freedesktop Poppler: version 0.74.0 only

Published 2019-04-05. Last modified 2026-06-17.