CVE-2017-2818

An exploitable heap overflow vulnerability exists in the image rendering functionality of Poppler 0.53.0. A specifically crafted PDF can cause an overly large number of color components during image rendering, resulting in heap corruption. An attacker controlled PDF file can be used to trigger this vulnerability.

• CWE-119

• http://www.securityfocus.com/bid/99497Third Party Advisory, VDB Entry
• https://talosintelligence.com/vulnerability_reports/TALOS-2017-0319Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/99497Third Party Advisory, VDB Entry
• https://talosintelligence.com/vulnerability_reports/TALOS-2017-0319Third Party Advisory, VDB Entry

Published

Jul 12, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-2812A code execution vulnerability exists in the kdu_buffered_ex…8.8
• CVE-2017-2813An exploitable integer overflow vulnerability exists in the …8.8
• CVE-2017-2814An exploitable heap overflow vulnerability exists in the ima…7.5
• CVE-2017-2815An exploitable XML entity injection vulnerability exists in …8.1
• CVE-2017-2816An exploitable buffer overflow vulnerability exists in the t…8.8
• CVE-2017-2817A stack buffer overflow vulnerability exists in the ISO pars…8.8
• CVE-2017-2819An exploitable heap-based buffer overflow exists in the Hang…8.8
• CVE-2017-2820An exploitable integer overflow vulnerability exists in the …8.8
• CVE-2017-2821An exploitable use-after-free exists in the PDF parsing func…8.8
• CVE-2017-2822An exploitable code execution vulnerability exists in the im…7.5
• CVE-2017-2823A use-after-free vulnerability exists in the .ISO parsing fu…7.8
• CVE-2017-2824An exploitable code execution vulnerability exists in the tr…