In Poppler 0.54.0, a memory leak vulnerability was found in the function Object::initArray in Object.cc, which allows attackers to cause a denial of service via a crafted file.
CVSS Details
- CVSS 3.0 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade poppler | Jan 9, 2018 | Jun 2, 2017 |
| Gentoo Linux | — | Upgrade app-text/poppler. | Jan 18, 2018 | Jun 2, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade poppler-utilsUpgrade poppler-qtUpgrade poppler-glibUpgrade poppler | Dec 4, 2019 | Jun 2, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade poppler-utilsUpgrade popplerUpgrade poppler-glibUpgrade poppler-qt | Apr 16, 2020 | Jun 2, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade poppler-glibUpgrade poppler-utilsUpgrade popplerUpgrade poppler-qt | Feb 3, 2021 | Jun 2, 2017 |
| Oracle Solaris | — | Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4 | Oct 19, 2018 | Jun 2, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 24, 2017 |
| Suse | — | Upgrade libpoppler-qt4-develUpgrade libpoppler-glib8Upgrade libpoppler44Upgrade poppler-toolsUpgrade libpoppler-glib-develUpgrade libpoppler-develUpgrade libpoppler-cpp0Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-qt4-4Upgrade libpoppler60 | Jul 28, 2017 | Jun 2, 2017 |
| Ubuntu | — | Upgrade libpoppler-qt5-1Upgrade libpoppler64Upgrade poppler-utilsUpgrade libpoppler-qt4-4Upgrade libpoppler-glib8Upgrade libpoppler44Upgrade libpoppler-cpp0Upgrade libpoppler-cpp0v5Upgrade libpoppler58Upgrade libpoppler61 | Jul 7, 2017 | Jun 2, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub