| Package | Affected versions | Patched versions |
|---|---|---|
| poppler | < 25.04.0 | 25.04.0 |
Poppler before 25.04.0 allows crafted input files to trigger out-of-bounds reads in the JBIG2Bitmap::combine function in JBIG2Stream.cc because of a misplaced isOk check.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free