CVE-2019-9545

PoC ×2—

CVSS 3.0

8.8 high

EPSS

2%p78

Published

Mar 1, 2019 (Mar 1, 2019)

Modified

Jun 17, 2026

Description

An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readTextRegion() located in JBIG2Stream.cc, can be triggered by sending a crafted pdf file to (for example) the pdfimages binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact. This is related to JBIG2Bitmap::clearToZero.

Vendors: freedesktop
Products: poppler
Weakness: CWE-674
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.8%)

In the news0 stories

No ingested article mentions this CVE yet.