Poppler buffer overflow vulnerability (CNVD-2021-44697)

Poppler is based on xpdf-3.0 code base PDF rendering library. A heap buffer overflow vulnerability exists in DCTStream::getChars in Poppler 20.12.1 in DCTStream.cc, which can be exploited by an attacker to cause a heap buffer overflow via a specially crafted PDF document...