An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function Splash::blitTransparent at splash/Splash.cc.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade poppler | Jun 7, 2019 | Apr 5, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade poppler-utilsUpgrade popplerUpgrade poppler-qtUpgrade poppler-glib | Aug 31, 2020 | Apr 5, 2019 |
| Huawei Euleros 2_0_sp9 | — | Upgrade popplerUpgrade poppler-cpp | Nov 3, 2020 | Apr 5, 2019 |
| Suse | — | Upgrade poppler-toolsUpgrade libpoppler73-32bitUpgrade typelib-1_0-Poppler-0_18Upgrade libpoppler73Upgrade libpoppler-develUpgrade libpoppler-cpp0Upgrade libpoppler-glib8Upgrade libpoppler-glib-devel | Dec 2, 2021 | Apr 5, 2019 |
| Ubuntu | — | Upgrade libpoppler85Upgrade poppler-utilsUpgrade libpoppler58Upgrade libpoppler79Upgrade libpoppler73 | Jun 27, 2019 | Apr 5, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub