Wind River Support Network

HomeDefectsLIN1023-9661

Fixed

LIN1023-9661 : Security Advisory - poppler - CVE-2024-56378

Created: Dec 22, 2024 Updated: Feb 7, 2025

Resolved Date: Feb 7, 2025

Found In Version: 10.23.30.1

Fix Version: 10.23.30.15

Severity: Standard

Applicable for: Wind River Linux LTS 23

Component/s: Userspace

Description

libpoppler.so in Poppler through 24.12.0 has an out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc.

CREATE(Triage):(User=admin) CVE-2024-56378 (https://nvd.nist.gov/vuln/detail/CVE-2024-56378)