CVE-2017-9083

CVE-2017-9083 describes a NULL pointer dereference vulnerability in poppler 0.54.0, a PDF rendering library used by applications like Evince. This flaw, located in the JPXStream::readUByte function, can lead to a denial-of-service condition, such as a segmentation fault, when processing a specially crafted or invalid PDF file. Rated Medium with a CVSS score of 6.5, it requires user interaction (UI:R) for exploitation, as an attacker would need to trick a user into opening a malicious PDF. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.