Wind River Support Network

HomeDefectsLIN9-8255

Fixed

LIN9-8255 : Security Advisory - poppler - CVE-2019-9631

Created: Mar 27, 2019 Updated: May 18, 2019

Resolved Date: Apr 19, 2019

Found In Version: unknown

Fix Version: 9.0.0.21

Severity: Standard

Applicable for: Wind River Linux 9

Component/s: Userspace

Description

Poppler 0.74.0 has a heap-based buffer over-read in the CairoRescaleBox.cc downsample_row_box_filter function.

CREATE(Triage): {Link=https://nvd.nist.gov/vuln/detail/CVE-2019-9631 User=admin}

CVEs

CVE-2019-9631