CVEs-PoC/2018/CVE-2018-16646.md

CVE-2018-16646

Description

In Poppler 0.68.0, the Parser::getObj() function in Parser.cc may cause infinite recursion via a crafted file. A remote attacker can leverage this for a DoS attack.

POC

Reference

• https://bugzilla.redhat.com/show_bug.cgi?id=1622951

Github

• https://github.com/Fineas/CVE-2019-13288-POC