CVE-2015-8868

Name of the Vulnerable Software and Affected Versions Poppler versions prior to 0.40.0

Description The issue is related to a heap-based buffer overflow in the ExponentialFunction::ExponentialFunction function. This can be triggered by remote attackers via an invalid blend mode in the ExtGState dictionary in a crafted PDF document, potentially leading to a denial of service (memory corruption and crash) or possibly the execution of arbitrary code.

Recommendations For versions prior to 0.40.0, update to version 0.40.0 or later to resolve the issue. As a temporary workaround, consider restricting the processing of PDF documents from untrusted sources until the update is applied.