CVE-2018-20481 Explained : Impact and Mitigation

The vulnerability mishandles unallocated XRef entries in the XRef::getEntry function of Poppler 0.72.0. Remote attackers can exploit this vulnerability to cause a denial of service through a NULL pointer dereference.