Homepage

Out-of-bounds Read Affecting poppler package, versions <0.69.0-2

Severity

 Recommended
low

Based on Debian security rating.

Threat Intelligence

EPSS
0.86% (83rd percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-DEBIAN12-POPPLER-1557506
  • published25 Jul 2018
  • disclosed25 Jul 2018
Report a new vulnerability Found a mistake?

Introduced: 25 Jul 2018

CVE-2018-13988  (opens in a new tab)
CWE-125  (opens in a new tab)

How to fix?

Upgrade Debian:12 poppler to version 0.69.0-2 or higher.

NVD Description

Note: Versions mentioned in the description apply only to the upstream poppler package and not the poppler package as distributed by Debian. See How to fix? for Debian:12 relevant fixed versions and status.

Poppler through 0.62 contains an out of bounds read vulnerability due to an incorrect memory access that is not mapped in its memory space, as demonstrated by pdfunite. This can result in memory corruption and denial of service. This may be exploitable when a victim opens a specially crafted PDF file.