CVE-2024-56378

Medium

Published: —Translated: 27/07/2026(UTC)NVD NIST

Summary

An out-of-bounds read vulnerability exists in libpoppler.so in Poppler through version 24.12.0 within the JBIG2Bitmap::combine function in JBIG2Stream.cc.

Risk Assessment

This vulnerability could allow an attacker to read sensitive memory contents or crash applications processing malicious PDF files.

Recommendation

Update Poppler to version 24.12.1 or later which includes the fix.

Original NVD description (English source)

libpoppler.so in Poppler through 24.12.0 has an out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc.