CVE-2023-34872

A vulnerability in Outline.cc for Poppler prior to 23.06.0 allows a remote attacker to cause a Denial of Service (DoS) (crash) via a crafted PDF file in OutlineItem::open.

CVSS v3.1 NVD

5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.90% chance of exploitation in the next 30 days, 59th percentile

Published

2023-07-31

Updated

2025-11-04

Proof-of-concept exploits (1)

• https://gitlab.freedesktop.org/poppler/poppler/-/issues/1399

Security advisories

• https://gitlab.freedesktop.org/poppler/poppler/-/commit/591235c8b6c65a2eee88991b9ae73490f…

References

• CVE Record
• NVD entry