High severity7.5NVD Advisory· Published Jul 12, 2017· Updated May 13, 2026
CVE-2017-2814
CVE-2017-2814
Description
An exploitable heap overflow vulnerability exists in the image rendering functionality of Poppler 0.53.0. A specifically crafted pdf can cause an image resizing after allocation has already occurred, resulting in heap corruption which can lead to code execution. An attacker controlled PDF file can be used to trigger this vulnerability.
Affected products
2- cpe:2.3:a:freedesktop:poppler:0.53.0:*:*:*:*:*:*:*
- Range: 0.53.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- www.securityfocus.com/bid/99497nvdThird Party AdvisoryVDB Entry
- talosintelligence.com/vulnerability_reports/TALOS-2017-0311nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.