In Poppler through 0.76.1, there is a heap-based buffer over-read in JPXStream::init in JPEG2000Stream.cc via data with inconsistent heights or widths.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2019-05-23T04:54:12

Updated: 2024-08-04T23:17:39.558Z

Reserved: 2019-05-23T00:00:00

Link: CVE-2019-12293

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2019-05-23T05:29:00.183

Modified: 2023-11-07T03:03:31.030

Link: CVE-2019-12293

cve-icon Redhat

Severity : Moderate

Publid Date: 2019-05-23T00:00:00Z

Links: CVE-2019-12293 - Bugzilla