CVE-2019-9545
HIGHPoppler 0.74.0 - Denial of Service via Recursive Function Call in JBIG2Stream::readTextRegion
Title source: llmDescription
An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readTextRegion() located in JBIG2Stream.cc, can be triggered by sending a crafted pdf file to (for example) the pdfimages binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact. This is related to JBIG2Bitmap::clearToZero.
References (2)
Core 2
Core References
Exploit, Third Party Advisory x_refsource_misc
https://gitlab.freedesktop.org/poppler/poppler/issues/731
Exploit, Third Party Advisory x_refsource_misc
https://research.loginsoft.com/bugs/recursive-function-call-in-function-jbig2streamreadtextregion-poppler-0-74-0/
Scores
CVSS v3
8.8
EPSS
0.0182
EPSS Percentile
75.9%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
CWE
CWE-674
Status
published
Products (1)
freedesktop/poppler
0.74.0
Published
Mar 01, 2019
Tracked Since
Feb 18, 2026