In Poppler through 0.76.1, there is a heap-based buffer over-read in JPXStream::init in JPEG2000Stream.cc via data with inconsistent heights or widths.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade poppler-glib-develUpgrade poppler-cppUpgrade poppler-develUpgrade poppler-cpp-develUpgrade poppler-qtUpgrade poppler-demosUpgrade poppler-glibUpgrade poppler-utilsUpgrade popplerUpgrade poppler-qt-develUpgrade poppler-debuginfo | Aug 25, 2020 | May 23, 2019 |
| Amazon_linux | — | Upgrade poppler | Jul 18, 2020 | May 23, 2019 |
| Centos_linux | — | Upgrade evince-dviUpgrade poppler-glib-debuginfoUpgrade evince-debuginfoUpgrade poppler-cpp-develUpgrade poppler-glibUpgrade poppler-utils-debuginfoUpgrade poppler-cppUpgrade poppler-glib-develUpgrade popplerUpgrade poppler-qtUpgrade poppler-debugsourceUpgrade poppler-qt-develUpgrade evinceUpgrade evince-develUpgrade poppler-demosUpgrade poppler-utilsUpgrade poppler-cpp-debuginfoUpgrade evince-browser-pluginUpgrade poppler-qt5-debuginfoUpgrade evince-libsUpgrade evince-nautilusUpgrade poppler-develUpgrade poppler-debuginfo | Sep 12, 2019 | May 23, 2019 |
| Debian | — | Upgrade poppler | Jun 7, 2019 | May 23, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade poppler-glibUpgrade poppler-qtUpgrade popplerUpgrade poppler-utils | Feb 22, 2021 | May 23, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade popplerUpgrade poppler-qtUpgrade poppler-utilsUpgrade poppler-glib | Jan 20, 2021 | May 23, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade poppler-glibUpgrade popplerUpgrade poppler-qtUpgrade poppler-utils | Dec 16, 2020 | May 23, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade poppler-glibUpgrade popplerUpgrade poppler-utilsUpgrade poppler-qt | Aug 31, 2020 | May 23, 2019 |
| Huawei Euleros 2_0_sp9 | — | Upgrade popplerUpgrade poppler-cpp | Nov 3, 2020 | May 23, 2019 |
| Oracle Solaris | — | Upgrade desktop/pdf-viewer/poppler to version 0.79.0-11.4.14.0.1.1.0 on Solaris 11.4 | Oct 16, 2019 | May 23, 2019 |
| Oracle_linux | — | Upgrade poppler-cppUpgrade popplerUpgrade evince-develUpgrade poppler-qt-develUpgrade poppler-glib-develUpgrade poppler-qt5-develUpgrade poppler-qt5Upgrade evinceUpgrade poppler-develUpgrade poppler-demosUpgrade poppler-qtUpgrade evince-browser-pluginUpgrade evince-dviUpgrade evince-nautilusUpgrade poppler-utilsUpgrade poppler-cpp-develUpgrade evince-libsUpgrade poppler-glib | Jul 21, 2020 | May 23, 2019 |
| Redhat_linux | — | No solution existsUpgrade poppler-cpp-develUpgrade poppler-qt5Upgrade evince-dviUpgrade poppler-qt5-develUpgrade poppler-glib-debuginfoUpgrade evince-nautilusUpgrade evince-browser-pluginUpgrade poppler-develUpgrade evince-develUpgrade poppler-qtUpgrade poppler-debugsourceUpgrade poppler-qt5-debuginfoUpgrade poppler-glib-develUpgrade poppler-cppUpgrade poppler-utilsUpgrade poppler-glibUpgrade poppler-demosUpgrade evince-debuginfoUpgrade poppler-debuginfoUpgrade evince-libsUpgrade popplerUpgrade poppler-utils-debuginfoUpgrade evinceUpgrade poppler-cpp-debuginfoUpgrade poppler-qt-devel | Sep 12, 2019 | May 23, 2019 |
| Suse | — | Upgrade libpoppler-glib8Upgrade poppler-toolsUpgrade libpoppler73-32bitUpgrade libpoppler73Upgrade libpoppler-cpp0Upgrade libpoppler60Upgrade libpoppler-qt4-develUpgrade libpoppler-glib-develUpgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-develUpgrade libpoppler-qt4-4 | Aug 9, 2024 | May 23, 2019 |
| Ubuntu | — | Upgrade libpoppler58Upgrade libpoppler85Upgrade libpoppler79Upgrade libpoppler73Upgrade poppler-utils | Jun 27, 2019 | May 23, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub