NetSight
IP …
medium6.5

CVE-2019-9959

The JPXStream::init function in Poppler 0.78.0 and earlier doesn't check for negative values of stream length, leading to an Integer Overflow, thereby making i…

Impact

The JPXStream::init function in Poppler 0.78.0 and earlier doesn't check for negative values of stream length, leading to an Integer Overflow, thereby making it possible to allocate a large memory chunk on the heap, with a size controlled by an attacker, as demonstrated by pdftocairo.

Affected products

VendorProductAffected versions
FreedesktopPoppler
through 0.78.0
DebianDebian Linux
Versions 8.0, 9.0, 10.0
FedoraprojectFedora
Versions 29, 30
RedhatEnterprise Linux
Version 8.0
RedhatEnterprise Linux Eus
Versions 8.1, 8.2, 8.4, 8.6
RedhatEnterprise Linux Server Aus
Versions 8.2, 8.4, 8.6
RedhatEnterprise Linux Server Tus
Versions 8.2, 8.4, 8.6

Weakness classification

CWE-190

References