CVE-2019-7310

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In Poppler 0.73.0, a heap-based buffer over-read (due to an integer signedness error in the XRef::getEntry function in XRef.cc) allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted PDF document, as demonstrated by pdftocairo.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-125 CWE-681

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/bid/106829Third Party Advisory, VDB Entry
https://access.redhat.com/errata/RHSA-2019:2022Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:2713Third Party Advisory
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12797Issue Tracking, Permissions Required, Third Party Advisory
https://gitlab.freedesktop.org/poppler/poppler/issues/717Exploit, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/03/msg00008.htmlMailing List, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/11/msg00014.htmlMailing List, Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BI7NLDN2HUEU4ZW3D7XPHOAEGT2CKDRO/
https://usn.ubuntu.com/3886-1/Third Party Advisory
http://www.securityfocus.com/bid/106829Third Party Advisory, VDB Entry
https://access.redhat.com/errata/RHSA-2019:2022Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:2713Third Party Advisory
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12797Issue Tracking, Permissions Required, Third Party Advisory
https://gitlab.freedesktop.org/poppler/poppler/issues/717Exploit, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/03/msg00008.htmlMailing List, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/11/msg00014.htmlMailing List, Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BI7NLDN2HUEU4ZW3D7XPHOAEGT2CKDRO/
https://usn.ubuntu.com/3886-1/Third Party Advisory

Timeline

Published: Feb 3, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-73117.8An issue was discovered on Linksys WRT1900ACS 1.0.3.187766 devices. A lack of encryption in how the user login cookie (admin-auth) is stored CVE-2019-73125.3Limited plaintext disclosure exists in PRIMX Zed Entreprise for Windows before 6.1.2240, Zed Entreprise for Windows (ANSSI qualification sub CVE-2019-73136.1www/resource.py in Buildbot before 1.8.1 allows CRLF injection in the Location header of /auth/login and /auth/logout via the redirect param CVE-2019-73149.8liblivemedia in Live555 before 2019.02.03 mishandles the termination of an RTSP stream after RTP/RTCP-over-RTSP has been set up, which could CVE-2019-73157.5Genie Access WIP3BVAF WISH IP 3MP IR Auto Focus Bullet Camera devices through 3.x are vulnerable to directory traversal via the web interfac CVE-2019-73169.8An issue was discovered in CSS-TRICKS Chat2 through 2015-05-05. The userid parameter in jumpin.php has a SQL injection vulnerability.CVE-2019-73175.3png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.CVE-2019-73198.3An issue was discovered in Cloudera Hue 6.0.0 through 6.1.0. When using one of following authentication backends: LdapBackend, PamBackend, S CVE-2019-73219.8Usage of an uninitialized variable in the function fz_load_jpeg in Artifex MuPDF 1.14 can result in a heap overflow vulnerability that allow CVE-2019-73237.5GUP (generic update process) in LightySoft LogMX before 7.4.0 does not properly verify the authenticity of updates, which allows man-in-the-CVE-2019-73246.1app/Core/Paginator.php in Kanboard before 1.2.8 has XSS in pagination sorting.CVE-2019-73256.1Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as multiple views under web/skins/classic/views insecurely utilize