CVE-2017-14520

FAUCET Score

CVE-2017-14520 describes a high-severity floating-point exception vulnerability in Poppler 0.59.0, specifically within the Splash::scaleImageYuXd() function, which can be triggered by processing a malicious PDF file. This local vulnerability, requiring user interaction, could lead to high impacts on confidentiality, integrity, and availability. While rated with a CVSS score of 7.8, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion or media coverage.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		0.59.0CPE matchmatch criteria	cpe:2.3:a:freedesktop:poppler:0.59.0:::::::*

CVSS Data

CVSS version used by this source: 3.0

7.8HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

Exploitability Score

1.8

Impact Score

5.9

CvssVersion

3.0

Exploit Intelligence

EPSS Score

1.21%

Probability of exploitation in next 30 days

EPSS Percentile

65.3%

Percentile rank of EPSS score among Peer Group

As of 2026-07-27

Model: v2026.06.15

This CVE's current EPSS score of 0.0121 is in the 63rd percentile among its peer group of 11,617 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Patches (1)

redhatend of lifevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: poppler

Vendor Advisories (1)

redhatCVE-2017-14520Low

poppler: Floating point exception in Splash::scaleImageYuXd() function in Splash.cc

Sep 17, 2017

References

bugs.freedesktop.org / show_bug.cgi

ExploitThird Party Advisory

debian.org / security/2018/dsa-4079