Poppler integer overflow vulnerability

Poppler is a PDF rendering library based on the xpdf-3.0 codebase. Poppler 0.78.0 and earlier versions are vulnerable to integer overflow. The vulnerability stems from the JPXStream::init function not checking for negative values of stream length. An attacker could exploit this vulnerability to allocate large memory blocks on the heap.