VDB
DEBIAN-CVE-2018-13988
DEBIAN-CVE-2018-13988
PUBLISHED
CVSS 6.5 MEDIUM
Record from OSV · Published July 25, 2018
Poppler through 0.62 contains an out of bounds read vulnerability due to an incorrect memory access that is not mapped in its memory space, as demonstrated by pdfunite. This can result in memory corruption and denial of service. This may be exploitable when a victim opens a specially crafted PDF file.
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| poppler | Debian:14 | 0.69.0-2 |
| poppler | Debian:12 | 0.69.0-2 |
| poppler | Debian:13 | 0.69.0-2 |
Risk scores
CVSS 3.0
6.5
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Debian:14 | poppler | 0 |
| Debian:12 | poppler | 0 |
| Debian:13 | poppler | 0 |
Timeline
- Jul 25, 2018 CVE Published
- Oct 23, 2026 CVE Updated
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln DEBIAN-CVE-2018-13988
vulnetix vdb fixes DEBIAN-CVE-2018-13988Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/DEBIAN-CVE-2018-13988/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart