Out-of-bounds read In poppler
Description
Poppler before 25.04.0 allows crafted input files to trigger out-of-bounds reads in the JBIG2Bitmap::combine function in JBIG2Stream.cc because of a misplaced isOk check.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 debian 12 | 22.12.0-2+deb12u1 | ||
debian 11 | 20.09.0-3.1+deb11u2 | ||
debian 13 | 25.03.0-3 | ||
debian 14 | 25.03.0-3 | ||
 rpm rhel6 | - | - | |
rpm rhel10.0 | 0:24.02.0-7.el10_0 | ||
rpm rhel7 | - | - | |
rpm rhel8.4 | 0:20.11.0-2.el8_4.2 | ||
rpm rhel7 | - | - | |
rpm rhel8 | 0:20.11.0-13.el8_10 |
1-10 of 14
10
Aliases
1. 2. 3. 4. 5.