CVE-2022-37050

Name of the Vulnerable Software and Affected Versions Poppler version 22.07.0

Description The issue is related to the handling of the xref data structure in getCatalog processing, which can be exploited by crafting a malicious PDF file. This can cause a denial-of-service, leading to application crashes with SIGABRT. The vulnerability is a result of an incomplete patch.

Recommendations For Poppler version 22.07.0, consider applying a patch or fix that properly handles the xref data structure in getCatalog processing to prevent denial-of-service attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.