PT-2023-25043

CVE-2023-34872

Published

2023-05-15

Updated

2026-09-29

Description by

CVSS 3.1

5.5

Medium

MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Poppler versions prior to 23.06.0

Description A vulnerability in Outline.cc for Poppler allows a remote attacker to cause a Denial of Service (DoS) (crash) via a crafted PDF file in OutlineItem::open().

Recommendations For versions prior to 23.06.0, update to version 23.06.0 or later to resolve the issue. As a temporary workaround, consider restricting the processing of crafted PDF files until a patch is applied.

Exploitability

Exploit

Fix

Impacts

Vendors