An issue was discovered in Poppler 22.08.0. There is a reachable assertion in Object.h, will lead to denial of service because PDFDoc::replacePageDict in PDFDoc.cc lacks a stream check before saving an embedded file.
References
Configurations
History
21 Nov 2024, 07:16
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://gitlab.freedesktop.org/poppler/poppler/-/commit/4564a002bcb6094cc460bc0d5ddff9423fe6dd28 - Patch | |
| References | () https://gitlab.freedesktop.org/poppler/poppler/-/issues/1282 - Exploit, Issue Tracking |
28 Aug 2023, 18:29
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-617 | |
| CPE | cpe:2.3:a:freedesktop:poppler:22.08.0:*:*:*:*:*:*:* | |
| First Time |
Freedesktop
Freedesktop poppler |
|
| References | (MISC) https://gitlab.freedesktop.org/poppler/poppler/-/issues/1282 - Exploit, Issue Tracking | |
| References | (MISC) https://gitlab.freedesktop.org/poppler/poppler/-/commit/4564a002bcb6094cc460bc0d5ddff9423fe6dd28 - Patch | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
22 Aug 2023, 19:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-08-22 19:16
Updated : 2024-11-21 07:16
NVD link : CVE-2022-38349
Mitre link : CVE-2022-38349
CVE.ORG link : CVE-2022-38349
JSON object : View
Products Affected
freedesktop
- poppler
CWE
CWE-617
Reachable Assertion