cve/2018/CVE-2018-20481.md
2024-05-26 14:27:05 +02:00

767 B

CVE-2018-20481

Description

XRef::getEntry in XRef.cc in Poppler 0.72.0 mishandles unallocated XRef entries, which allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted PDF document, when XRefEntry::setFlag in XRef.h is called from Parser::makeStream in Parser.cc.

POC

Reference

No PoCs from references.

Github