vulnerability
Ubuntu: USN-7213-1 (CVE-2024-56378): poppler vulnerability
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:L/Au:S/C:N/I:P/A:N) | Dec 23, 2024 | Jan 17, 2025 | Apr 16, 2026 |
Severity
4
CVSS
(AV:N/AC:L/Au:S/C:N/I:P/A:N)
Published
Dec 23, 2024
Added
Jan 17, 2025
Modified
Apr 16, 2026
Description
libpoppler.so in Poppler through 24.12.0 has an out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc.
Solutions
ubuntu-pro-upgrade-libpoppler58ubuntu-pro-upgrade-libpoppler73ubuntu-pro-upgrade-poppler-utilsubuntu-upgrade-libpoppler118ubuntu-upgrade-libpoppler134ubuntu-upgrade-libpoppler140ubuntu-upgrade-libpoppler97ubuntu-upgrade-poppler-utils
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.