CVE-2020-27778: Debian Linux

High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days.

A flaw was found in Poppler in the way certain PDF files were converted into HTML. A remote attacker could exploit this flaw by providing a malicious PDF file that, when processed by the 'pdftohtml' program, would crash the application causing a denial of service.

Affected products

• Debian Debian Linux: version 10.0 only
• Freedesktop Poppler: before 0.76.0 (fixed in 0.76.0)
• Red Hat Enterprise Linux: version 8.0 only

Published 2020-12-03. Last modified 2026-06-17.