CVE-2017-9408
poppler: Memory leak in the Object::initArray function
Loading…
Severity
LowRed Hat Product Security
CVSS 3.0
Review impact separately from score.
Published · April 24, 2017
Updated · May 13, 2026
Description
In Poppler 0.54.0, a memory leak vulnerability was found in the function Object::initArray in Object.cc, which allows attackers to cause a denial of service via a crafted file.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.0 · 3.3CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
CWE not specified