CVE-2018-19149

Poppler before 0.70.0 has a NULL pointer dereference in _poppler_attachment_new when called from poppler_annot_file_attachment_get_attachment.

Date published : 2018-11-10

http://www.securityfocus.com/bid/106031

https://security.gentoo.org/glsa/201904-04