[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fIkFE3Resjq5kMIMsUbYCPWsPjw-_O0JmU0FTVTRWqJM":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":128,"kevVulnerabilities":190,"topProductsByCves":196,"seoMetadata":207,"meta":216},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":127},11261,"freedesktop",24,141,1,1135,"2025-08-04","f",[16,21,27,33,39,44,50,54,59,63,68,72,76,80,84,87,90,94,99,103,108,113,118,123],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":13},46786,"poppler",249,88,{"id":22,"product_name":23,"version_count":24,"cve_count":9,"kev_count":25,"last_cve_update":26},46773,"dbus",210,0,"2023-06-08",{"id":28,"product_name":29,"version_count":30,"cve_count":31,"kev_count":25,"last_cve_update":32},46794,"xdg-utils",7,5,"2022-11-19",{"id":34,"product_name":35,"version_count":36,"cve_count":37,"kev_count":25,"last_cve_update":38},46771,"accountsservice",54,3,"2020-11-11",{"id":40,"product_name":41,"version_count":42,"cve_count":37,"kev_count":25,"last_cve_update":43},46791,"udisks",42,"2018-09-22",{"id":45,"product_name":46,"version_count":47,"cve_count":48,"kev_count":25,"last_cve_update":49},46776,"dbus-glib",23,2,"2013-03-05",{"id":51,"product_name":52,"version_count":48,"cve_count":48,"kev_count":25,"last_cve_update":53},46784,"policykit","2010-04-06",{"id":55,"product_name":56,"version_count":57,"cve_count":48,"kev_count":25,"last_cve_update":58},46779,"libbsd",30,"2020-01-08",{"id":60,"product_name":61,"version_count":30,"cve_count":11,"kev_count":25,"last_cve_update":62},46780,"libdbus","2012-09-18",{"id":64,"product_name":65,"version_count":66,"cve_count":11,"kev_count":25,"last_cve_update":67},46781,"libice",9,"2018-07-27",{"id":69,"product_name":70,"version_count":30,"cve_count":11,"kev_count":25,"last_cve_update":71},46782,"libinput","2022-06-02",{"id":73,"product_name":74,"version_count":25,"cve_count":11,"kev_count":25,"last_cve_update":75},46785,"polkit","2017-02-13",{"id":77,"product_name":78,"version_count":37,"cve_count":11,"kev_count":25,"last_cve_update":79},46774,"dbus1.0","2008-10-07",{"id":81,"product_name":82,"version_count":11,"cve_count":11,"kev_count":25,"last_cve_update":83},46787,"scratchbox2","2008-11-06",{"id":85,"product_name":86,"version_count":25,"cve_count":11,"kev_count":25,"last_cve_update":62},46788,"spice-gtk",{"id":88,"product_name":89,"version_count":25,"cve_count":11,"kev_count":25,"last_cve_update":79},46775,"dbus1.1.0",{"id":91,"product_name":92,"version_count":93,"cve_count":11,"kev_count":25,"last_cve_update":71},46777,"freetype_demo_programs",76,{"id":95,"product_name":96,"version_count":97,"cve_count":11,"kev_count":25,"last_cve_update":98},46778,"gst-plugins-bad",131,"2021-01-26",{"id":100,"product_name":101,"version_count":11,"cve_count":11,"kev_count":25,"last_cve_update":102},46792,"virglrenderer","2017-03-10",{"id":104,"product_name":105,"version_count":106,"cve_count":11,"kev_count":25,"last_cve_update":107},46793,"xdg-user-dirs",19,"2018-01-09",{"id":109,"product_name":110,"version_count":111,"cve_count":11,"kev_count":25,"last_cve_update":112},46790,"telepathy_gabble",27,"2011-02-19",{"id":114,"product_name":115,"version_count":116,"cve_count":11,"kev_count":25,"last_cve_update":117},46772,"colord",14,"2011-12-10",{"id":119,"product_name":120,"version_count":121,"cve_count":25,"kev_count":25,"last_cve_update":122},46789,"systemd",205,null,{"id":124,"product_name":125,"version_count":126,"cve_count":25,"kev_count":25,"last_cve_update":122},46783,"libmbim",18,"Freedesktop is a technology vendor with 24 tracked products and 141 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[129,137,145,151,156,162,168,173,179,185],{"cveId":130,"description":131,"publishedDate":132,"cvssScore":133,"cvssVersion":134,"severity":135,"isKev":4,"epssScore":136},"CVE-2021-30860","An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.6.2. Processing a maliciously crafted PDF may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.","2021-08-24",7.8,"v3.1","High",0.75994,{"cveId":138,"description":139,"publishedDate":140,"cvssScore":31,"cvssVersion":141,"severity":142,"isKev":143,"epssScore":144},"CVE-2013-4474","Format string vulnerability in the extractPages function in utils\u002Fpdfseparate.cc in poppler before 0.24.3 allows remote attackers to cause a denial of service (crash) via format string specifiers in a destination filename.","2013-11-23","v2","Medium",false,0.10483,{"cveId":146,"description":147,"publishedDate":148,"cvssScore":149,"cvssVersion":141,"severity":142,"isKev":143,"epssScore":150},"CVE-2007-3387","Integer overflow in the StreamPredictor::StreamPredictor function in xpdf 3.02, as used in (1) poppler before 0.5.91, (2) gpdf before 2.8.2, (3) kpdf, (4) kdegraphics, (5) CUPS, (6) PDFedit, and other products, might allow remote attackers to execute arbitrary code via a crafted PDF file that triggers a stack-based buffer overflow in the StreamPredictor::getNextLine function.","2007-07-30",6.8,0.08565,{"cveId":152,"description":153,"publishedDate":140,"cvssScore":154,"cvssVersion":141,"severity":135,"isKev":143,"epssScore":155},"CVE-2013-4473","Stack-based buffer overflow in the extractPages function in utils\u002Fpdfseparate.cc in poppler before 0.24.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a source filename.",7.5,0.07126,{"cveId":157,"description":158,"publishedDate":79,"cvssScore":159,"cvssVersion":141,"severity":160,"isKev":143,"epssScore":161},"CVE-2008-3834","The dbus_signature_validate function in the D-bus library (libdbus) before 1.2.4 allows remote attackers to cause a denial of service (application abort) via a message containing a malformed signature, which triggers a failed assertion error.",2.1,"Low",0.04585,{"cveId":163,"description":164,"publishedDate":165,"cvssScore":133,"cvssVersion":166,"severity":135,"isKev":143,"epssScore":167},"CVE-2015-8868","Heap-based buffer overflow in the ExponentialFunction::ExponentialFunction function in Poppler before 0.40.0 allows remote attackers to cause a denial of service (memory corruption and crash) or possibly execute arbitrary code via an invalid blend mode in the ExtGState dictionary in a crafted PDF document.","2016-05-06","v3.0",0.04557,{"cveId":169,"description":170,"publishedDate":62,"cvssScore":171,"cvssVersion":141,"severity":142,"isKev":143,"epssScore":172},"CVE-2012-3524","libdbus 1.5.x and earlier, when used in setuid or other privileged programs in X.org and possibly other products, allows local users to gain privileges and execute arbitrary code via the DBUS_SYSTEM_BUS_ADDRESS environment variable.  NOTE: libdbus maintainers state that this is a vulnerability in the applications that do not cleanse environment variables, not in libdbus itself: \"we do not support use of libdbus in setuid binaries that do not sanitize their environment before their first call into libdbus.\"",6.9,0.04477,{"cveId":174,"description":175,"publishedDate":176,"cvssScore":177,"cvssVersion":134,"severity":135,"isKev":143,"epssScore":178},"CVE-2017-2820","An exploitable integer overflow vulnerability exists in the JPEG 2000 image parsing functionality of freedesktop.org Poppler 0.53.0. A specially crafted PDF file can lead to an integer overflow causing out of bounds memory overwrite on the heap resulting in potential arbitrary code execution. To trigger this vulnerability, a victim must open the malicious PDF in an application using this library.","2017-07-12",8.8,0.04415,{"cveId":180,"description":181,"publishedDate":182,"cvssScore":183,"cvssVersion":166,"severity":142,"isKev":143,"epssScore":184},"CVE-2017-9775","Stack buffer overflow in GfxState.cc in pdftocairo in Poppler before 0.56 allows remote attackers to cause a denial of service (application crash) via a crafted PDF document.","2017-06-22",6.5,0.04338,{"cveId":186,"description":187,"publishedDate":188,"cvssScore":149,"cvssVersion":141,"severity":142,"isKev":143,"epssScore":189},"CVE-2013-1788","poppler before 0.22.1 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors that trigger an \"invalid memory access\" in (1) splash\u002FSplash.cc, (2) poppler\u002FFunction.cc, and (3) poppler\u002FStream.cc.","2013-04-09",0.03866,[191],{"cveId":130,"description":131,"publishedDate":132,"cvssScore":133,"cvssVersion":134,"severity":135,"isKev":4,"epssScore":136,"cisaVulnName":192,"cisaDateAdded":193,"cisaShortDescription":194,"cisaRequiredAction":195},"Apple Multiple Products Integer Overflow Vulnerability","2021-11-03","Apple iOS, iPadOS, macOS, and watchOS CoreGraphics contain an integer overflow vulnerability which may allow code execution when processing a maliciously crafted PDF. The vulnerability is also known under the moniker of FORCEDENTRY.","Apply updates per vendor instructions.",[197,198,199,200,201,202,203,204,205,206],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":13},{"id":22,"product_name":23,"version_count":24,"cve_count":9,"kev_count":25,"last_cve_update":26},{"id":28,"product_name":29,"version_count":30,"cve_count":31,"kev_count":25,"last_cve_update":32},{"id":34,"product_name":35,"version_count":36,"cve_count":37,"kev_count":25,"last_cve_update":38},{"id":40,"product_name":41,"version_count":42,"cve_count":37,"kev_count":25,"last_cve_update":43},{"id":45,"product_name":46,"version_count":47,"cve_count":48,"kev_count":25,"last_cve_update":49},{"id":51,"product_name":52,"version_count":48,"cve_count":48,"kev_count":25,"last_cve_update":53},{"id":55,"product_name":56,"version_count":57,"cve_count":48,"kev_count":25,"last_cve_update":58},{"id":60,"product_name":61,"version_count":30,"cve_count":11,"kev_count":25,"last_cve_update":62},{"id":64,"product_name":65,"version_count":66,"cve_count":11,"kev_count":25,"last_cve_update":67},{"title":208,"metaDescription":209,"keywords":210,"structuredData":211},"Freedesktop - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Freedesktop covering 24 products with 141 tracked vulnerabilities including 0 critical and 1 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Freedesktop vulnerabilities, Freedesktop security, Freedesktop CVE, Freedesktop threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking, Freedesktop KEV, Freedesktop exploited vulnerabilities",{"@context":212,"@type":213,"name":214,"description":209,"url":215},"https:\u002F\u002Fschema.org","Organization","Freedesktop","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Ffreedesktop",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":217,"apiVersion":218},"2026-10-17T13:41:48.006Z","3.0"]