Heap-Based Buffer Underwrite in Poppler Affects Image Processing

CVE-2019-9200

What is CVE-2019-9200?

A heap-based buffer underwrite vulnerability exists in the ImageStream::getLine() function of Poppler version 0.74.0. This security flaw can be triggered by an attacker through the exploitation of crafted PDF files directed at the pdfimages binary. Successful exploitation may result in Denial of Service, leading to a segmentation fault, and could potentially allow further unspecified impacts, posing a risk to the integrity and availability of the system.

References