CVE-2013-1788: Freedesktop Poppler

Medium severity, CVSS 6.8. EPSS: 3.9% chance of exploitation in the next 30 days.

poppler before 0.22.1 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors that trigger an "invalid memory access" in (1) splash/Splash.cc, (2) poppler/Function.cc, and (3) poppler/Stream.cc.

Affected products

• Freedesktop Poppler: up to and including 0.22.0

Published 2013-04-09. Last modified 2026-06-16.