CVE-2018-10768

There is a NULL pointer dereference in the AnnotPath::getCoordsLength function in Annot.h in an Ubuntu package for Poppler 0.24.5. A crafted input will lead to a remote denial of service attack. Later Ubuntu packages such as for Poppler 0.41.0 are not affected.

• CWE-476

• https://access.redhat.com/errata/RHBA-2019:0327Third Party Advisory
• https://access.redhat.com/errata/RHSA-2018:3140Third Party Advisory
• https://access.redhat.com/errata/RHSA-2018:3505Third Party Advisory
• https://bugs.freedesktop.org/show_bug.cgi?id=106408Exploit, Issue Tracking, Patch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2018/10/msg00024.htmlMailing List, Third Party Advisory
• https://usn.ubuntu.com/3647-1/Third Party Advisory
• https://access.redhat.com/errata/RHBA-2019:0327Third Party Advisory
• https://access.redhat.com/errata/RHSA-2018:3140Third Party Advisory
• https://access.redhat.com/errata/RHSA-2018:3505Third Party Advisory
• https://bugs.freedesktop.org/show_bug.cgi?id=106408Exploit, Issue Tracking, Patch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2018/10/msg00024.htmlMailing List, Third Party Advisory
• https://usn.ubuntu.com/3647-1/Third Party Advisory

Published

May 6, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-1076Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-10760Unrestricted file upload vulnerability in the Files plugin i…
• CVE-2018-10761Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-10762Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-10763Multiple cross-site scripting (XSS) vulnerabilities in Synam…
• CVE-2018-10767There is a stack-based buffer over-read in calling GLib in t…
• CVE-2018-10769The transferProxy and approveProxy functions of a smart cont…
• CVE-2018-1077Spacewalk 2.6 contains an API which has an XXE flaw allowing…
• CVE-2018-10770download.rsp on ShenZhen Anni "5 in 1 XVR" devices allows re…
• CVE-2018-10771Stack-based buffer overflow in the get_key function in parse…9.8
• CVE-2018-10772The tEXtToDataBuf function in pngimage.cpp in Exiv2 through …
• CVE-2018-10773NULL pointer deference in the addsn function in serialno.c i…