CVE-2017-2818high

CVE-2017-2818: high-severity vulnerability in Poppler

Published · Updated

Follow this CVE+ Monitor poppler+ Monitor poppler

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 2.0%
An exploitable heap overflow vulnerability exists in the image rendering functionality of Poppler 0.53.0. A specifically crafted PDF can cause an overly large number of color components during image rendering, resulting in heap corruption. An attacker controlled PDF file can be used to trigger this vulnerability.
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Poppler · Poppler
Related CVEs — Poppler

In the same product, most dangerous first.

CVE-2017-2820HIGHCVE-2017-2820EPSS 4.4%CVE-2017-2814HIGHCVE-2017-2814EPSS 3.0%