In Poppler through 0.76.1, there is a heap-based buffer over-read in JPXStream::init in JPEG2000Stream.cc via data with inconsistent heights or widths.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade popplerUpgrade poppler-qt-develUpgrade poppler-debuginfoUpgrade poppler-glibUpgrade poppler-glib-develUpgrade poppler-demosUpgrade poppler-cppUpgrade poppler-qtUpgrade poppler-cpp-develUpgrade poppler-utilsUpgrade poppler-devel | Aug 25, 2020 | May 23, 2019 |
| Amazon_linux | — | Upgrade poppler | Jul 18, 2020 | May 23, 2019 |
| Centos_linux | — | Upgrade poppler-qt5-debuginfoUpgrade evince-libsUpgrade evince-nautilusUpgrade poppler-debuginfoUpgrade poppler-demosUpgrade poppler-develUpgrade poppler-cpp-debuginfoUpgrade evince-browser-pluginUpgrade poppler-utilsUpgrade popplerUpgrade poppler-debugsourceUpgrade evinceUpgrade poppler-glib-develUpgrade poppler-cppUpgrade evince-dviUpgrade poppler-qtUpgrade evince-develUpgrade poppler-qt-develUpgrade poppler-glib-debuginfoUpgrade poppler-utils-debuginfoUpgrade poppler-glibUpgrade evince-debuginfoUpgrade poppler-cpp-devel | Sep 12, 2019 | May 23, 2019 |
| Debian | — | Upgrade poppler | Jun 7, 2019 | May 23, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade poppler-glibUpgrade poppler-qtUpgrade poppler-utilsUpgrade poppler | Feb 22, 2021 | May 23, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade poppler-qtUpgrade poppler-utilsUpgrade popplerUpgrade poppler-glib | Jan 20, 2021 | May 23, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade poppler-utilsUpgrade poppler-qtUpgrade poppler-glibUpgrade poppler | Dec 16, 2020 | May 23, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade popplerUpgrade poppler-glibUpgrade poppler-utilsUpgrade poppler-qt | Aug 31, 2020 | May 23, 2019 |
| Huawei Euleros 2_0_sp9 | — | Upgrade popplerUpgrade poppler-cpp | Nov 3, 2020 | May 23, 2019 |
| Oracle Solaris | — | Upgrade desktop/pdf-viewer/poppler to version 0.79.0-11.4.14.0.1.1.0 on Solaris 11.4 | Oct 16, 2019 | May 23, 2019 |
| Oracle_linux | — | Upgrade poppler-glibUpgrade evince-browser-pluginUpgrade poppler-cpp-develUpgrade poppler-demosUpgrade poppler-qtUpgrade poppler-utilsUpgrade evince-dviUpgrade evince-nautilusUpgrade evince-libsUpgrade poppler-qt-develUpgrade poppler-develUpgrade poppler-glib-develUpgrade poppler-qt5Upgrade evinceUpgrade popplerUpgrade poppler-cppUpgrade evince-develUpgrade poppler-qt5-devel | Jul 21, 2020 | May 23, 2019 |
| Redhat_linux | — | Upgrade evinceUpgrade evince-debuginfoUpgrade poppler-cpp-debuginfoUpgrade poppler-utils-debuginfoUpgrade poppler-qt-develUpgrade evince-libsUpgrade poppler-debuginfoUpgrade poppler-demosUpgrade popplerUpgrade poppler-cpp-develUpgrade poppler-utilsUpgrade poppler-cppUpgrade evince-develUpgrade poppler-develUpgrade poppler-qt5-develUpgrade poppler-glibUpgrade poppler-qt5Upgrade evince-browser-pluginUpgrade poppler-debugsourceUpgrade poppler-qt5-debuginfoUpgrade evince-dviUpgrade evince-nautilusUpgrade poppler-glib-debuginfoNo solution existsUpgrade poppler-glib-develUpgrade poppler-qt | Sep 12, 2019 | May 23, 2019 |
| Suse | — | Upgrade libpoppler-qt4-4Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-glib-develUpgrade libpoppler-qt4-develUpgrade libpoppler-develUpgrade libpoppler-glib8Upgrade libpoppler-cpp0Upgrade libpoppler60Upgrade libpoppler73Upgrade poppler-toolsUpgrade libpoppler73-32bit | Aug 9, 2024 | May 23, 2019 |
| Ubuntu | — | Upgrade poppler-utilsUpgrade libpoppler58Upgrade libpoppler85Upgrade libpoppler73Upgrade libpoppler79 | Jun 27, 2019 | May 23, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub