CVE-2019-13289

Name of the Vulnerable Software and Affected Versions Xpdf version 4.01.01

Description A use-after-free issue exists in the JBIG2Stream::close() function, located at JBIG2Stream.cc. This can be triggered by sending a crafted PDF document to the pdftoppm tool.

Recommendations For Xpdf version 4.01.01, consider disabling the JBIG2Stream::close() function as a temporary workaround until a patch is available. Restrict access to the pdftoppm tool to minimize the risk of exploitation.