Medium
CVSS 6.5
Overview
A reachable Object::getString assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to construction of invalid rich media annotation assets in the AnnotRichMedia class in Annot.c.
CVE-2018-20551
A reachable Object::getString assertion in Poppler 0.72.0 allows attackers to ca...
Risk analysis
This vulnerability is rated 🟡 MEDIUM.
- CVSS: 6.5 (MEDIUM)
- Detected tags: none (tag impact: LOW)
Recommended actions:
- Prioritize remediation based on business criticality and exposure.
- Limit exposure and increase monitoring until fixed.