A reachable Object::getString assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to construction of invalid rich media annotation assets in the AnnotRichMedia class in Annot.c.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-20551.json"