CVE-2017-7511

MEDIUM

poppler <0.17.3 - Memory Corruption

Title source: llm

poppler since version 0.17.3 has been vulnerable to NULL pointer dereference in pdfunite triggered by specially crafted documents.

Core 2

Core References

Third Party Advisory vendor-advisory x_refsource_gentoo

Patch, Third Party Advisory x_refsource_confirm

CVSS v3 5.5

EPSS 0.0109

EPSS Percentile 61.2%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE

CWE-476

Status published

Products (50)

freedesktop/poppler 0.17.3

freedesktop/poppler 0.17.4

freedesktop/poppler 0.18.0

freedesktop/poppler 0.18.1

freedesktop/poppler 0.18.2

freedesktop/poppler 0.18.3

freedesktop/poppler 0.18.4

freedesktop/poppler 0.19.0

freedesktop/poppler 0.19.1

freedesktop/poppler 0.19.2

... and 40 more

Published May 30, 2017

Tracked Since Feb 18, 2026