CVE-2019-9545

Name of the Vulnerable Software and Affected Versions Poppler version 0.74.0

Description An issue in the JBIG2Stream::readTextRegion() function, located in JBIG2Stream.cc, can be triggered by sending a crafted pdf file. This allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have other unspecified impacts. The issue is related to the JBIG2Bitmap::clearToZero function.

Recommendations For Poppler version 0.74.0, consider avoiding the use of the pdfimages binary with untrusted pdf files until a patch is available. As a temporary workaround, restrict access to the JBIG2Stream::readTextRegion() function to minimize the risk of exploitation.