CVE-2024-56378

Name of the Vulnerable Software and Affected Versions Poppler versions prior to 24.12.0

Description The issue is an out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc. This vulnerability occurs in the libpoppler.so file in Poppler.

Recommendations For versions prior to 24.12.0, as a temporary workaround, consider disabling the JBIG2Bitmap::combine function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.