CVE-2023-34872

MEDIUM 5.5EPSS 0.9%

A vulnerability in Outline.cc for Poppler prior to 23.06.0 allows a remote attacker to cause a Denial of Service (DoS) (crash) via a crafted PDF file in OutlineItem::open.

CVSS v3.1: 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS v3.1: 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS: 0.90% chance of exploitation in the next 30 days, 57th percentile
Published: 2023-07-31
Updated: 2025-11-04

Proof-of-concept exploits (1)

https://gitlab.freedesktop.org/poppler/poppler/-/issues/1399

References

Related