PDFDoc::markObject in PDFDoc.cc in Poppler 0.74.0 mishandles dict marking, leading to stack consumption in the function Dict::find() located at Dict.cc, which can (for example) be triggered by passing a crafted pdf file to the pdfunite binary.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9903
Reference (s):
- BID:107560
- URL: http://www.securityfocus.com/bid/107560
- FEDORA:FEDORA-2019-14040bfa27
- URL: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JQ6RABASMSIMMWMDZTP6ZWUWZPTBSVB5/
- FEDORA:FEDORA-2019-3193a75b06