CVE-2019-9959

Name of the Vulnerable Software and Affected Versions Poppler version 0.78.0 and earlier

Description The issue is related to the JPXStream::init function, which does not check for negative values of stream length, leading to an Integer Overflow. This allows an attacker to allocate a large memory chunk on the heap with a size controlled by the attacker, as demonstrated by pdftocairo. The vulnerability can be exploited by a remote attacker to cause a denial of service.

Recommendations For Poppler version 0.78.0 and earlier, update to a version that fixes the JPXStream::init function to check for negative stream length values. At the moment, there is no information about a newer version that contains a fix for this vulnerability.