Fixed
Created: Jul 22, 2019
Updated: Nov 23, 2019
Resolved Date: Nov 23, 2019
Found In Version: 9.0.0.1
Fix Version: 9.0.0.24
Severity: Standard
Applicable for: Wind River Linux 9
Component/s: Userspace
The JPXStream::init function in Poppler 0.78.0 and earlier doesn't check for negative values of stream length, leading to an Integer Overflow, thereby making it possible to allocate a large memory chunk on the heap, with a size controlled by an attacker, as demonstrated by pdftocairo.
CREATE(Triage): {Link=https://nvd.nist.gov/vuln/detail/CVE-2019-9959 User=admin}
