vulnerability

Huawei EulerOS: CVE-2018-20481: poppler security update

Try Surface Command
Back to search
Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:N/A:P)
Published
Dec 26, 2018
Added
Feb 8, 2021
Modified
Apr 1, 2026

Description

XRef::getEntry in XRef.cc in Poppler 0.72.0 mishandles unallocated XRef entries, which allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted PDF document, when XRefEntry::setFlag in XRef.h is called from Parser::makeStream in Parser.cc.

Solutions

huawei-euleros-2_0_sp9-upgrade-popplerhuawei-euleros-2_0_sp9-upgrade-poppler-cpphuawei-euleros-2_0_sp9-upgrade-poppler-help

References

Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report