Maksim

**Name of the Vulnerable Software and Affected Versions** Poppler version 0.74.0 **Description** The issue is related to a heap-based buffer over-read in the `downsample row box filter` function located in CairoRescaleBox.cc. This can potentially allow a remote attacker to access confidential data, compromise data integrity, and cause a denial of service. The vulnerability is associated with the Poppler library for displaying PDF files. **Recommendations** For Poppler version 0.74.0, consider disabling the `downsample row box filter` function as a temporary workaround until a patch is available. Restrict access to the CairoRescaleBox.cc module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.