Home

Description

libpoppler.so in Poppler through 24.12.0 has an out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc.

PUBLISHED Reserved 2024-12-22 | Published 2024-12-22 | Updated 2025-11-03 | Assigner mitre

References

lists.debian.org/debian-lts-announce/2025/04/msg00037.html

gitlab.freedesktop.org/poppler/poppler/-/issues/1553

gitlab.freedesktop.org/...ebed44b0c15522c27669ef6cdf93eff84e

gitlab.freedesktop.org/...7361339063e0b9bea50/CMakeLists.txt

cve.org (CVE-2024-56378)

nvd.nist.gov (CVE-2024-56378)

Download JSON

Data based on CVE®. Copyright © 1999-2025, The MITRE Corporation. All rights reserved.