Out-of-bounds read In okular
Description
Heap-based buffer overflow in the RLE decompression functionality in the TranscribePalmImageToJPEG function in generators/plucker/inplug/image.cpp in Okular in KDE SC 4.3.0 through 4.5.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted image in a PDB file.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 debian 12 | 4:4.4.5-2 | ||
debian 11 | 4:4.4.5-2 | ||
debian 13 | 4:4.4.5-2 | ||
debian 14 | 4:4.4.5-2 | ||
 rpm rhel6 | - | - |
Aliases
1. 2. 3. 4. 5.