Debian/poppler: high 8.8
A heap-based buffer underwrite exists in ImageStream::getLine() located at Stream.cc in Poppler 0.74.0 that can (for example) be triggered by sending a crafted PDF file to the pdfimages binary. It all
Action: Upgrade poppler to 0.71.0-4 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.71.0-4 | - |
Fixed versions
| 0.71.0-4 |
Sources
published · modified · JSON