VULNERABILITY INTELLIGENCE

CVE-2018-10768

CVSS score6.5 MEDIUM

EPSS probability2.35%

CISA KEVNot currently listed

Published2018-05-06

Last modified2026-06-17

Description

There is a NULL pointer dereference in the AnnotPath::getCoordsLength function in Annot.h in an Ubuntu package for Poppler 0.24.5. A crafted input will lead to a remote denial of service attack. Later Ubuntu packages such as for Poppler 0.41.0 are not affected.