CVE-2022-37050

2023-08-2219:16:23

mitre

web.nvd.nist.gov

353

cve-2022-37050

poppler

pdfdoc::savepageas

denial-of-service

sigabrt

pdf

vulnerability

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

6.5

Confidence

High

EPSS

0.01

Percentile

83.6%

JSON

In Poppler 22.07.0, PDFDoc::savePageAs in PDFDoc.c callows attackers to cause a denial-of-service (application crashes with SIGABRT) by crafting a PDF file in which the xref data structure is mishandled in getCatalog processing. Note that this vulnerability is caused by the incomplete patch of CVE-2018-20662.

Affected configurations

Nvd

Node

freedesktoppopplerMatch22.07.0

Node

debiandebian_linuxMatch10.0

VendorProductVersionCPE
freedesktoppoppler22.07.0cpe:2.3:a:freedesktop:poppler:22.07.0:*:*:*:*:*:*:*
debiandebian_linux10.0cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*