NetSight
IP …
medium6.5

CVE-2018-19149

Poppler before 0.70.0 has a NULL pointer dereference in _poppler_attachment_new when called from poppler_annot_file_attachment_get_attachment.

Impact

Poppler before 0.70.0 has a NULL pointer dereference in _poppler_attachment_new when called from poppler_annot_file_attachment_get_attachment.

Affected products

VendorProductAffected versions
FreedesktopPoppler
before 0.70.0
CanonicalUbuntu Linux
Versions 14.04, 16.04, 18.04, 18.10

Weakness classification

CWE-476

References