CVE-2017-9865

The function GfxImageColorMap::getGray in GfxState.cc in Poppler 0.54.0 allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a crafted PDF document, related to missing color-map validation in ImageOutputDev.cc.

• CWE-125

• http://somevulnsofadlab.blogspot.com/2017/06/popplerstack-buffer-overflow-in.htmlThird Party Advisory
• https://bugs.freedesktop.org/show_bug.cgi?id=100774Issue Tracking, Vendor Advisory
• https://security.gentoo.org/glsa/201801-17Third Party Advisory
• https://usn.ubuntu.com/4042-1/
• https://www.debian.org/security/2018/dsa-4079Third Party Advisory
• http://somevulnsofadlab.blogspot.com/2017/06/popplerstack-buffer-overflow-in.htmlThird Party Advisory
• https://bugs.freedesktop.org/show_bug.cgi?id=100774Issue Tracking, Vendor Advisory
• https://security.gentoo.org/glsa/201801-17Third Party Advisory
• https://usn.ubuntu.com/4042-1/
• https://www.debian.org/security/2018/dsa-4079Third Party Advisory

Published

Jun 25, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-9859An issue was discovered in SMA Solar Technology products. Th…
• CVE-2017-9860An issue was discovered in SMA Solar Technology products. An…
• CVE-2017-9861An issue was discovered in SMA Solar Technology products. Th…
• CVE-2017-9862An issue was discovered in SMA Solar Technology products. Wh…
• CVE-2017-9863An issue was discovered in SMA Solar Technology products. If…
• CVE-2017-9864An issue was discovered in SMA Solar Technology products. An…
• CVE-2017-9868In Mosquitto through 1.4.12, mosquitto.db (aka the persisten…
• CVE-2017-9869The II_step_one function in layer2.c in mpglib, as used in l…
• CVE-2017-9870The III_i_stereo function in layer3.c in mpglib, as used in …
• CVE-2017-9871The III_i_stereo function in layer3.c in mpglib, as used in …
• CVE-2017-9872The III_dequantize_sample function in layer3.c in mpglib, as…
• CVE-2017-9873IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows a…