CVE-2019-14288 - An issue was discovered in Xpdf 4.01.01

Back Back to CVE browser

HIGH

An issue was discovered in Xpdf 4.01.01

Published Jul 27, 2019

7.8

HIGH

CVSS 3.0

EPSS 1.04%

Description

An issue was discovered in Xpdf 4.01.01. There is an Integer overflow in the function JBIG2Bitmap::combine at JBIG2Stream.cc for the "one byte per line" case.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-190

Integer Overflow

References (2)

https://forum.xpdfreader.com/viewtopic.php?f=3&t=41851
x_refsource_MISCExploitThird Party Advisory
https://github.com/TeamSeri0us/pocs/tree/master/xpdf/4.01.01
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://forum.xpdfreader.com/viewtopic.php?f=3&t=41851		x_refsource_MISCExploitThird Party Advisory
https://github.com/TeamSeri0us/pocs/tree/master/xpdf/4.01.01		x_refsource_MISCExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jul 27, 2019

Updated Aug 5, 2024

Reserved Jul 27, 2019

Link CVE-2019-14288

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-14288

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-14288