PT-2023-5243
CVE-2022-37051
·
Published
2023-08-22
·
Updated
2026-06-11
Description by
CVSS 2.0
7.8
HighMetricsAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions
Poppler version 22.07.0
Description
An issue was discovered in the main function of pdfunite.cc, which lacks a stream check before saving an embedded file, leading to a reachable abort and denial of service. This can be exploited by a remote attacker to cause a denial of service.
Recommendations
For Poppler version 22.07.0, consider disabling the
pdfunite.cc component until a patch is available to prevent potential denial of service attacks.
At the moment, there is no information about a newer version that contains a fix for this vulnerability. Found an issue in the description? Have something to add? Feel free to write us 👾