View at Official suse advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2018-8100 severity low: SUSE including 16 source package names (libpoppler-cpp0, libpoppler-devel, …), 216 product×package rows across 37 product lines (SUSE CaaS Platform 4.0, SUSE Enterprise Storage 7, … (37 product lines)): Known Not Affected 216.
The JPXStream::readTilePart function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a specific pdf file, as demonstrated by pdftohtml.