CVE-2018-19149

MEDIUM 6.5CVE-2018-19149 · Published 10/11/2018 · updated 17/06/2026

In short

CVE-2018-19149 is a MEDIUM (CVSS 6.5) vulnerability affecting poppler (freedesktop).
Chance of exploitation in the next 30 days (EPSS): 2.4%, higher than 84.3% of all vulnerabilities.
Fix: update to 0.70.0 or later.

Package	Affected versions	Patched versions
poppler freedesktop	`< 0.70.0`	`0.70.0`

Poppler before 0.70.0 has a NULL pointer dereference in _poppler_attachment_new when called from poppler_annot_file_attachment_get_attachment.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

< 0.70.0

0.70.0

More vulnerabilities in poppler

See all →