Wind River Support Network

HomeDefectsLIN1021-12632

Fixed

LIN1021-12632 : Security Advisory - poppler - CVE-2024-56378

Created: Dec 22, 2024 Updated: May 26, 2025

Resolved Date: May 21, 2025

Found In Version: 10.21.20.1

Fix Version: 10.21.20.25

Severity: Standard

Applicable for: Wind River Linux LTS 21

Component/s: Userspace

Description

libpoppler.so in Poppler through 24.12.0 has an out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc.

CREATE(Triage):(User=admin) CVE-2024-56378 (https://nvd.nist.gov/vuln/detail/CVE-2024-56378)

CVEs

CVE-2024-56378