CVE-2023-34872

MediumCVSS 5.5

Published: 31/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.87%

54th percentile - higher than 54% of all known CVEs

Summary

A vulnerability in Outline.cc for Poppler prior to version 23.06.0 allows a remote attacker to cause a Denial of Service (DoS) via a crafted PDF file in OutlineItem::open.

Risk Assessment

An attacker can exploit this vulnerability to disrupt service, potentially leading to downtime for applications using Poppler.

Recommendation

It is recommended to update Poppler to version 23.06.0 or later to mitigate this vulnerability.

Original NVD description (English source)

A vulnerability in Outline.cc for Poppler prior to 23.06.0 allows a remote attacker to cause a Denial of Service (DoS) (crash) via a crafted PDF file in OutlineItem::open.