CVE-2019-14289

CVE-2019-14289 affects Xpdf 4.01.01 with an integer overflow in JBIG2Bitmap::combine (JBIG2Stream.cc) for the "multiple bytes per line" case. Public details in connected sources describe the underlying issue and attribute potential denial of service (per CNVD entry). Exploitation status, affected...

CVE-2019-14288

CVE-2019-14288 affects Xpdf 4.01.01 with an integer overflow in JBIG2Bitmap::combine() inside JBIG2Stream.cc for the one-byte-per-line scenario. The connected documents corroborate the flaw in this component/version across various advisories (Debian, SUSE, osv, CNVD, CNVD mirrors, NVD/CVE listing...

CVE-2019-14288

An issue was discovered in Xpdf 4.01.01. There is an Integer overflow in the function JBIG2Bitmap::combine at JBIG2Stream.cc for the "one byte per line" case...

CVE-2019-14288

An issue was discovered in Xpdf 4.01.01. There is an Integer overflow in the function JBIG2Bitmap::combine at JBIG2Stream.cc for the "one byte per line" case...

CVE-2019-14290: Out-of-bounds Read

An issue was discovered in Xpdf 4.01.01. There is an out of bounds read in the function GfxPatchMeshShading::parse at GfxState.cc for typeA==6 case 2...

PT-2019-13587

Name of the Vulnerable Software and Affected Versions Xpdf version 4.01.01 Description An issue was discovered in the function GfxPatchMeshShading::parse at GfxState.cc for the case where typeA==6 and case 2, resulting in an out of bounds read. Recommendations For Xpdf version 4.01.01, at the...

CVE-2019-14292: Out-of-bounds Read

An issue was discovered in Xpdf 4.01.01. There is an out of bounds read in the function GfxPatchMeshShading::parse at GfxState.cc for typeA!=6 case 1...

CVE-2019-14288: Integer Overflow or Wraparound

An issue was discovered in Xpdf 4.01.01. There is an Integer overflow in the function JBIG2Bitmap::combine at JBIG2Stream.cc for the "one byte per line" case...

PT-2019-13586

Name of the Vulnerable Software and Affected Versions Xpdf version 4.01.01 Description An issue was discovered in the function JBIG2Bitmap::combine at JBIG2Stream.cc for the "multiple bytes per line" case, which is affected by an integer overflow. Recommendations For Xpdf version 4.01.01, as a...

CVE-2019-14289: Integer Overflow or Wraparound

An issue was discovered in Xpdf 4.01.01. There is an integer overflow in the function JBIG2Bitmap::combine at JBIG2Stream.cc for the "multiple bytes per line" case...

CVE-2019-14294: Out-of-bounds Read

An issue was discovered in Xpdf 4.01.01. There is a use-after-free in the function JPXStream::fillReadBuf at JPXStream.cc, due to an out of bounds read...

PT-2019-13585

Name of the Vulnerable Software and Affected Versions Xpdf version 4.01.01 Description An issue was discovered in the function JBIG2Bitmap::combine at JBIG2Stream.cc for the "one byte per line" case, which is affected by an integer overflow. Recommendations For Xpdf version 4.01.01, consider...

PT-2019-13588

Name of the Vulnerable Software and Affected Versions Xpdf version 4.01.01 Description An issue was discovered in the function GfxPatchMeshShading::parse at GfxState.cc for the case where typeA==6 and case 3, resulting in an out of bounds read. Recommendations For Xpdf version 4.01.01, at the...

CVE-2019-14291: Out-of-bounds Read

An issue was discovered in Xpdf 4.01.01. There is an out of bounds read in the function GfxPatchMeshShading::parse at GfxState.cc for typeA==6 case 3...

CVE-2019-14293: Out-of-bounds Read

An issue was discovered in Xpdf 4.01.01. There is an out of bounds read in the function GfxPatchMeshShading::parse at GfxState.cc for typeA!=6 case 2...

PT-2019-13591

Name of the Vulnerable Software and Affected Versions Xpdf version 4.01.01 Description An issue was discovered in the function JPXStream::fillReadBuf at JPXStream.cc, due to an out of bounds read, resulting in a use-after-free. Recommendations For Xpdf version 4.01.01, at the moment, there is no...

PT-2019-13590

Name of the Vulnerable Software and Affected Versions Xpdf version 4.01.01 Description An issue was discovered in the function GfxPatchMeshShading::parse at GfxState.cc for the case where typeA is not equal to 6, specifically case 2, which leads to an out of bounds read. Recommendations For Xpdf...

PT-2019-13589 · Xpdf +1 · Xpdf +1

Name of the Vulnerable Software and Affected Versions: Xpdf version 4.01.01 Description: An issue was discovered in the function GfxPatchMeshShading::parse at GfxState.cc for the case where typeA is not equal to 6, specifically case 1, which leads to an out of bounds read. Recommendations: For Xp...

Poppler Integer Overflow Vulnerability

Poppler is based on xpdf-3.0 code base PDF rendering library. An integer overflow vulnerability exists in Poppler 0.78.0 and earlier versions. The vulnerability stems from the JPXStream::init function not checking for negative values of the stream length. An attacker can exploit the vulnerability...

Xpdf heap buffer overflow vulnerability (CNVD-2019-21459)

Xpdf is an open source PDF reader from Foo Labs. The product supports decoding LZW compressed format files and read encrypted PDF files. A buffer overflow vulnerability exists in the 'DCTStream::readScan' function of the Stream.cc file in Xpdf version 4.01.01. The vulnerability stems from a...