CVE-2024-6239

Low

Published: —Translated: 27/07/2026(UTC)NVD NIST

Summary

A flaw was found in Poppler's Pdfinfo utility. Using the -dests parameter with a malformed input file can cause the utility to crash.

Risk Assessment

An attacker can remotely cause a denial of service (DoS) by sending a malicious PDF file to be processed by pdfinfo.

Recommendation

Update Poppler library to the latest version containing the fix for CVE-2024-6239.

Original NVD description (English source)

A flaw was found in the Poppler's Pdfinfo utility. This issue occurs when using -dests parameter with pdfinfo utility. By using certain malformed input files, an attacker could cause the utility to crash, leading to a denial of service.