Poppler before 0.66.0 has an integer overflow in Parser::makeStream in Parser.cc.
{ "urgency": "not yet assigned" }