CVE-2025-32365 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Poppler before 25.04.0 allows crafted input files to trigger out-of-bounds reads in the JBIG2Bitmap::combine function in JBIG2Stream.cc because of a misplaced i…
Medium CVSS: 4.0

CVE-2025-32365

Poppler before 25.04.0 allows crafted input files to trigger out-of-bounds reads in the JBIG2Bitmap::combine function in JBIG2Stream.cc because of a misplaced isOk check.
Vendor
Freedesktop
Product
Poppler
CWE
CWE-125
Yayın Tarihi
2025-04-05 22:15:19
Güncelleme
2025-11-03 20:18:26
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-125 Poppler MEDIUM Freedesktop 2025

Referanslar

https://gitlab.freedesktop.org/poppler/poppler/-/issues/1577 https://gitlab.freedesktop.org/poppler/poppler/-/merge_requests/1792 https://lists.debian.org/debian-lts-announce/2025/04/msg00037.html