Lucene search

K
osvGoogleOSV:CVE-2022-38349
HistoryAug 22, 2023 - 7:16 p.m.

CVE-2022-38349

2023-08-2219:16:23
Google
osv.dev
7
poppler
pdfdoc
replacepagedict
denial of service
vulnerability
embedded file
assertion
stream check

6.9 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.6%

An issue was discovered in Poppler 22.08.0. There is a reachable assertion in Object.h, will lead to denial of service because PDFDoc::replacePageDict in PDFDoc.cc lacks a stream check before saving an embedded file.

6.9 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.6%