OSV-2020-2303 Use-of-uninitialized-value in Splash::pipeRunSimpleXBGR8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29651 Crash type: Use-of-uninitialized-value Crash state: Splash::pipeRunSimpleXBGR8 Splash::drawSpan Splash::fillWithPattern...

PT-2021-27648

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the following functions: Splash::pipeRunSimpleXBGR8,...

poppler:qt_textbox_fuzzer: Use-of-uninitialized-value in Splash::pipeRunSimpleXBGR8

Detailed Report: https://oss-fuzz.com/testcase?key=4995451774435328 Project: poppler Fuzzing Engine: libFuzzer Fuzz Target: qttextboxfuzzer Job Type: libfuzzermsanpoppler Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: Splash::pipeRunSimpleXBGR8...

PT-2021-27538

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash occurs in the SplashPath::lineTo function, which is called by Splash::makeDashedPath and...

EulerOS 2.0 SP9 : poppler (EulerOS-SA-2020-2436)

According to the versions of the poppler packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function Splash::blitTransparent at...

OSV-2020-794 Use-of-uninitialized-value in Splash::pipeRunSimpleXBGR8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23086 Crash type: Use-of-uninitialized-value Crash state: Splash::pipeRunSimpleXBGR8 Splash::blitImage Splash::drawImage...

PT-2020-22547

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the following functions: Splash::pipeRunSimpleXBGR8,...

CVE-2020-11882

The O2 Business application 1.2.0 for Android exposes the canvasm.myo2.SplashActivity activity to other applications. The purpose of this activity is to handle deeplinks that can be delivered either via links or by directly calling the activity. However, the deeplink format is not properly...

WS-2020-0303

Poppler 0.70.0 to 21.01.0 has a use uninitialized value in Parser::makeStream in Splash::pipeRunSimpleXBGR8...

Arbitrary Code Execution

java is vulnerable to arbitrary code execution. A buffer overflow flaw was found in the splash screen processing. A remote attacker could extend privileges to read and write local files, as well as to execute local applications with the privileges of the user running the java process...

Updated poppler packages fix security vulnerabilities

Updated poppler packages fix security vulnerabilities Poppler 0.74.0 has a heap-based buffer over-read in the CairoRescaleBox.cc downsamplerowboxfilter function. CVE-2019-9631 PDFDoc::markObject in PDFDoc.cc in Poppler 0.74.0 mishandles dict marking, leading to stack consumption in the function...

Arbitrary Code Execution

libpoppler.so is vulnerable to arbitrary code execution. A heap-based buffer overflow in Splash::blitTransparent in splash/Splash.cc allows an attacker to execute arbitrary code...

Poppler null pointer dereference vulnerability (CNVD-2019-14281)

Poppler is a C++ class library for generating PDF, the library is inherited from Xpdf PDF reader. Poppler 0.74.0 version of the splash/SplashClip.cc file of the 'SplashClip::clipAALine' function of the null pointer back-reference vulnerability, the vulnerability stems from the network system or...

CVE-2019-10872

An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function Splash::blitTransparent at splash/Splash.cc...

CVE-2019-10872

An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function Splash::blitTransparent at splash/Splash.cc...

DEBIAN-CVE-2019-10872

An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function Splash::blitTransparent at splash/Splash.cc...

CVE-2019-10872

An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function Splash::blitTransparent at splash/Splash.cc...

CVE-2019-10872

An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function Splash::blitTransparent at splash/Splash.cc...

CVE-2019-10873: NULL Pointer Dereference

An issue was discovered in Poppler 0.74.0. There is a NULL pointer dereference in the function SplashClip::clipAALine at splash/SplashClip.cc...

PT-2019-5746

Name of the Vulnerable Software and Affected Versions Poppler version 0.74.0 Description The issue is related to a heap-based buffer over-read in the Splash::blitTransparent function at splash/Splash.cc. This can allow a remote attacker to access confidential data, compromise its integrity, and...