CVE-2018-13988 - CVE House
Back to Database
Status published Medium CVE-2018-13988

Poppler through 0.62 contains an out of bounds read vulnerability...

Vulnerability Description

Poppler through 0.62 contains an out of bounds read vulnerability due to an incorrect memory access that is not mapped in its memory space, as demonstrated by pdfunite. This can result in memory corruption and denial of service. This may be exploitable when a victim opens a specially crafted PDF file.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-13988

Credits & Attribution

No credits recorded in the NVD database.

References

More from freedesktop

View All →
CVE-2025-52968
xdg-open in xdg-utils through 1.2.1 can send requests containing SameSite=Strict...
Low 2.7
CVE-2025-43903
NSSCryptoSignBackend.cc in Poppler before 25.04.0 does not verify the adbe.pkcs7.sha1...
Medium 4.3
CVE-2025-43718
Poppler 24.06.1 through 25.x before 25.04.0 allows stack consumption and...
Low 2.9
CVE-2025-32365
Poppler before 25.04.0 allows crafted input files to trigger out-of-bounds...
Medium 4
CVE-2025-32364
A floating-point exception in the PSStack::roll function of Poppler before...
Medium 4

Affected Vendor

freedesktop

View all reports →

Affected Software

poppler, ubuntu linux, debian linux, ansible tower, openshift container platform, enterprise linux desktop, enterprise linux server, enterprise linux workstation
Vulnerable Versions:
0, 14.04, 16.04, 18.04, 8.0, 3.3.0, 3.11, 7.0

Timeline

Official Publish: July 25th, 2018
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.