Integer overflow in the JBIG2 decoding feature in Poppler before 0.10.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to CairoOutputDev (CairoOutputDev.cc).
Exploit prediction scoring system (EPSS) score
EPSS Score 0.265
EPSS Ranking 96.0%