CVE-2025-32364

Description

References

• gitlab.freedesktop.org/poppler/poppler/-/commit/d87bc726c7cc98f8c26b60ece5f20236e9de1bc3 · Patch
• gitlab.freedesktop.org/poppler/poppler/-/issues/1574 · Exploit
• lists.debian.org/debian-lts-announce/2025/04/msg00037.html

Altre vulnerabilità di poppler

• CVE-2025-50420MEDIO 6.5An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted …
• CVE-2025-52886MEDIO 5.9Poppler is a PDF rendering library. Versions prior to 25.06.0 use `std::atomic_int` for reference counting. Because `std::atomic_int` is onl…
• CVE-2025-43903BASSO 3.3NSSCryptoSignBackend.cc in Poppler before 25.04.0 does not verify the adbe.pkcs7.sha1 signatures on documents, resulting in potential signat…
• CVE-2025-32365ALTO 7.1Poppler before 25.04.0 allows crafted input files to trigger out-of-bounds reads in the JBIG2Bitmap::combine function in JBIG2Stream.cc beca…
• CVE-2024-56378MEDIO 4.3libpoppler.so in Poppler through 24.12.0 has an out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc.