CVE-2019-14494

An issue was discovered in Poppler through 0.78.0. There is a divide-by-zero error in the function SplashOutputDev::tilingPatternFill at SplashOutputDev.cc.

CVSS v3.1 NVD

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS v2.0 NVD

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P

EPSS

2.68% chance of exploitation in the next 30 days, 86th percentile

Published

2019-08-01

Updated

2024-08-05

Proof-of-concept exploits (1)

• https://gitlab.freedesktop.org/poppler/poppler/issues/802

Security advisories

• https://gitlab.freedesktop.org/poppler/poppler/merge_requests/317
• https://lists.debian.org/debian-lts-announce/2020/11/msg00014.html
• https://lists.debian.org/debian-lts-announce/2022/09/msg00030.html
• https://usn.ubuntu.com/4091-1

References

• CVE Record
• NVD entry