← Back

CVE-2022-37052

nvd nist
Published: Aug 22, 2023Modified: Jun 17, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

A reachable Object::getString assertion in Poppler 22.07.0 allows attackers to cause a denial of service due to a failure in markObject.

Affected (1)

Products: Freedesktop: Poppler
Freedesktop
1 product
Poppler
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Poppler
Version 22.07.0

Related CWEs

CWE-617
Reachable Assertion
The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

References (5)

Source: cve@mitre.org
Patch
Source: cve@mitre.org
ExploitIssue Tracking
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitIssue Tracking
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.