CVE-2018-21009

CWE-190 — Integer Overflow10 documents8 sources
Severity
8.8HIGH
EPSS
0.5%
top 34.87%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Freedesktop Poppler
Timeline
PublishedSep 5
Latest updateMay 24

Description

Poppler before 0.66.0 has an integer overflow in Parser::makeStream in Parser.cc.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages2 packages

▶NVDfreedesktop/poppler< 0.76.0
▶Debianpoppler< 0.69.0-2+3

Patches

Patch: gitlab.freedesktop.org ↗Patch: gitlab.freedesktop.org ↗

🔴Vulnerability Details

3
GHSA
GHSA-2x97-hfgj-7xpw: Poppler before 0↗2022-05-24
▶
CVEList
CVE-2018-21009: Poppler before 0↗2019-09-05
▶
OSV
CVE-2018-21009: Poppler before 0↗2019-09-05
▶

📋Vendor Advisories

3
Ubuntu
poppler vulnerabilities↗2020-11-25
▶
Red Hat
poppler: integer overflow in Parser::makeStream in Parser.cc↗2019-09-05
▶
Debian
CVE-2018-21009: poppler - Poppler before 0.66.0 has an integer overflow in Parser::makeStream in Parser.cc...↗2018
▶

💬Community

3
Bugzilla
CVE-2018-21009 poppler: integer overflow in Parser::makeStream in Parser.cc↗2019-09-20
▶
Bugzilla
CVE-2018-21009 poppler: integer overflow in Parser::makeStream in Parser.cc [fedora-all]↗2019-09-20
▶
Bugzilla
CVE-2018-21009 mingw-poppler: poppler: integer overflow in Parser::makeStream in Parser.cc [fedora-all]↗2019-09-20
▶
CVE-2018-21009 (HIGH CVSS 8.8) | Poppler before 0.66.0 has an intege | cvebase.io