CVE-2018-21009: Freedesktop Poppler

High severity, CVSS 8.8. EPSS: 1.9% chance of exploitation in the next 30 days.

Poppler before 0.66.0 has an integer overflow in Parser::makeStream in Parser.cc.

Affected products

• Freedesktop Poppler: before 0.76.0 (fixed in 0.76.0)

Published 2019-09-05. Last modified 2026-06-17.