CVE-2019-14494
poppler: divide-by-zero in function SplashOutputDev::tilingPatternFill in SplashOutputDev.cc
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · July 11, 2019
Updated · June 27, 2026
Description
A divide-by-zero error was found in the way Poppler handled certain PDF files. A remote attacker could exploit this flaw by providing a malicious PDF file that, when processed by an application linked to Poppler, would crash the application causing a denial of service.
Statement
This flaw did not affect the versions of Poppler as shipped with Red Hat Enterprise Linux 5 and 6, as they did not include the vulnerable code.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-369 · Divide By Zero