CVE-2018-20551: Canonical Ubuntu Linux

Medium severity, CVSS 6.5. EPSS: 2% chance of exploitation in the next 30 days.

A reachable Object::getString assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to construction of invalid rich media annotation assets in the AnnotRichMedia class in Annot.c.

Affected products

• Canonical Ubuntu Linux: version 14.04 only; version 16.04 only; version 18.04 only; version 18.10 only
• Freedesktop Poppler: version 0.72.0 only

Published 2018-12-28. Last modified 2026-06-17.