Wind River Support Network

HomeDefectsLIN1022-12259

Fixed

LIN1022-12259 : Security Advisory - poppler - CVE-2024-56378

Created: Dec 22, 2024 Updated: Jun 10, 2025

Resolved Date: May 28, 2025

Found In Version: 10.22.33.1

Fix Version: 10.22.33.21

Severity: Standard

Applicable for: Wind River Linux LTS 22

Component/s: Userspace

Description

libpoppler.so in Poppler through 24.12.0 has an out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc.

CREATE(Triage):(User=admin) CVE-2024-56378 (https://nvd.nist.gov/vuln/detail/CVE-2024-56378)

CVEs

CVE-2024-56378