An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function Splash::blitTransparent at splash/Splash.cc.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade poppler | Jun 7, 2019 | Apr 5, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade poppler-utilsUpgrade popplerUpgrade poppler-glibUpgrade poppler-qt | Aug 31, 2020 | Apr 5, 2019 |
| Huawei Euleros 2_0_sp9 | — | Upgrade poppler-cppUpgrade poppler | Nov 3, 2020 | Apr 5, 2019 |
| Suse | — | Upgrade libpoppler73Upgrade libpoppler-develUpgrade libpoppler-cpp0Upgrade libpoppler-glib-develUpgrade libpoppler-glib8Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler73-32bitUpgrade poppler-tools | Dec 2, 2021 | Apr 5, 2019 |
| Ubuntu | — | Upgrade libpoppler79Upgrade libpoppler58Upgrade libpoppler73Upgrade poppler-utilsUpgrade libpoppler85 | Jun 27, 2019 | Apr 5, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub