cve/2018/CVE-2018-19058.md

CVE-2018-19058

Description

An issue was discovered in Poppler 0.71.0. There is a reachable abort in Object.h, will lead to denial of service because EmbFile::save2 in FileSpec.cc lacks a stream check before saving an embedded file.

POC

Reference

• https://gitlab.freedesktop.org/poppler/poppler/issues/659
• https://gitlab.freedesktop.org/poppler/poppler/issues/659

Github

• https://github.com/Live-Hack-CVE/CVE-2018-19058