In Poppler 0.59.0, a NULL Pointer Dereference exists in the SplashOutputDev::type3D0() function in SplashOutputDev.cc via a crafted PDF document.
{ "availability": "No subscription required", "binaries": [ { "binary_version": "0.57.0-2ubuntu4", "binary_name": "gir1.2-poppler-0.18" }, { "binary_version": "0.57.0-2ubuntu4", "binary_name": "libpoppler-cpp-dev" }, { "binary_version": "0.57.0-2ubuntu4", "binary_name": "libpoppler-cpp0v5" }, { "binary_version": "0.57.0-2ubuntu4", "binary_name": "libpoppler-dev" }, { "binary_version": "0.57.0-2ubuntu4", "binary_name": "libpoppler-glib-dev" }, { "binary_version": "0.57.0-2ubuntu4", "binary_name": "libpoppler-glib8" }, { "binary_version": "0.57.0-2ubuntu4", "binary_name": "libpoppler-private-dev" }, { "binary_version": "0.57.0-2ubuntu4", "binary_name": "libpoppler-qt4-4" }, { "binary_version": "0.57.0-2ubuntu4", "binary_name": "libpoppler-qt4-dev" }, { "binary_version": "0.57.0-2ubuntu4", "binary_name": "libpoppler-qt5-1" }, { "binary_version": "0.57.0-2ubuntu4", "binary_name": "libpoppler-qt5-dev" }, { "binary_version": "0.57.0-2ubuntu4", "binary_name": "libpoppler68" }, { "binary_version": "0.57.0-2ubuntu4", "binary_name": "poppler-utils" } ] }