PulseLinuxLINUX UPDATE INTELLIGENCE
CVE Database›CVE-2017-14976

CVE-2017-14976

poppler: Heap-based buffer over-read in the FoFiType1C::convertToType0 function

Loading…

Severity

Low

Red Hat Product Security

3.3

CVSS 3.0

Review impact separately from score.

Published · September 14, 2017

Updated · May 13, 2026

Description

The FoFiType1C::convertToType0 function in FoFiType1C.cc in Poppler 0.59.0 has a heap-based buffer over-read vulnerability if an out-of-bounds font dictionary index is encountered, which allows an attacker to launch a denial of service attack.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.0 · 3.3
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CWE-122 · Heap-based Buffer Overflow