CVE-2018-20481

XRef::getEntry in XRef.cc in Poppler 0.72.0 mishandles unallocated XRef entries, which allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted PDF document, when XRefEntry::setFlag in XRef.h is called from Parser::makeStream in Parser.cc.

• CWE-476

• http://www.securityfocus.com/bid/106321Third Party Advisory, VDB Entry
• https://access.redhat.com/errata/RHSA-2019:2022
• https://access.redhat.com/errata/RHSA-2019:2713
• https://gitlab.freedesktop.org/poppler/poppler/issues/692Exploit, Issue Tracking, Vendor Advisory
• https://gitlab.freedesktop.org/poppler/poppler/merge_requests/143Patch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2019/03/msg00008.htmlThird Party Advisory
• https://lists.debian.org/debian-lts-announce/2020/07/msg00018.html
• https://usn.ubuntu.com/3865-1/Third Party Advisory
• http://www.securityfocus.com/bid/106321Third Party Advisory, VDB Entry
• https://access.redhat.com/errata/RHSA-2019:2022
• https://access.redhat.com/errata/RHSA-2019:2713
• https://gitlab.freedesktop.org/poppler/poppler/issues/692Exploit, Issue Tracking, Vendor Advisory
• https://gitlab.freedesktop.org/poppler/poppler/merge_requests/143Patch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2019/03/msg00008.htmlThird Party Advisory
• https://lists.debian.org/debian-lts-announce/2020/07/msg00018.html
• https://usn.ubuntu.com/3865-1/Third Party Advisory

Published

Dec 26, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-20476An issue was discovered in S-CMS 3.0. It allows XSS via the …
• CVE-2018-20477An issue was discovered in S-CMS 3.0. It allows SQL Injectio…
• CVE-2018-20478An issue was discovered in S-CMS 1.0. It allows reading cert…
• CVE-2018-20479An issue was discovered in S-CMS 1.0. It allows SQL Injectio…
• CVE-2018-2048Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-20480An issue was discovered in S-CMS 1.0. It allows SQL Injectio…
• CVE-2018-20482GNU Tar through 1.30, when --sparse is used, mishandles file…4.7
• CVE-2018-20483set_file_metadata in xattr.c in GNU Wget before 1.20.1 store…
• CVE-2018-20484Zoho ManageEngine ADSelfService Plus 5.7 before build 5702 h…
• CVE-2018-20485Zoho ManageEngine ADSelfService Plus 5.7 before build 5702 h…
• CVE-2018-20486MetInfo 6.x through 6.1.3 has XSS via the /admin/login/login…
• CVE-2018-20487An issue was discovered in the firewall3 component in Inteno…