CVE-2019-10872

Fixed in a distro release EPSS 3%

An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function Splash::blitTransparent at splash/Splash.cc.

Published 2019-04-05 · CVE record · OSV

Products: freedesktop poppler

Distro releases

Release	Package	Fixed in
Debian 12	poppler	0.71.0-5
Debian 13	poppler	0.71.0-5
Debian 14	poppler	0.71.0-5
Debian 8	poppler	0.26.5-2+deb8u10
Debian 9	poppler	0.48.0-2+deb9u3
SUSE Enterprise Storage 6	poppler	0.62.0-4.6.1
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS	poppler	0.62.0-4.6.1
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS	poppler	0.62.0-4.6.1
SUSE Linux Enterprise High Performance Computing 15-ESPOS	poppler	0.62.0-4.6.1
SUSE Linux Enterprise High Performance Computing 15-LTSS	poppler	0.62.0-4.6.1
SUSE Linux Enterprise Server 12 SP5	poppler	0.43.0-16.19.3
SUSE Linux Enterprise Server 12 SP5	poppler-qt	0.43.0-16.19.3
SUSE Linux Enterprise Server 15 SP1-BCL	poppler	0.62.0-4.6.1
SUSE Linux Enterprise Server 15 SP1-LTSS	poppler	0.62.0-4.6.1
SUSE Linux Enterprise Server 15-LTSS	poppler	0.62.0-4.6.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5	poppler	0.43.0-16.19.3
SUSE Linux Enterprise Server for SAP Applications 12 SP5	poppler-qt	0.43.0-16.19.3
SUSE Linux Enterprise Server for SAP Applications 15	poppler	0.62.0-4.6.1
SUSE Linux Enterprise Server for SAP Applications 15 SP1	poppler	0.62.0-4.6.1
SUSE Linux Enterprise Software Development Kit 12 SP5	poppler	0.43.0-16.19.3
SUSE Linux Enterprise Software Development Kit 12 SP5	poppler	0.24.4-14.20.2
SUSE Linux Enterprise Software Development Kit 12 SP5	poppler-qt	0.43.0-16.19.3
SUSE Linux Enterprise Workstation Extension 15 SP2	poppler	0.62.0-4.6.1
Ubuntu 16.04 LTS	poppler	0.41.0-0ubuntu1.14
Ubuntu 18.04 LTS	poppler	0.62.0-2ubuntu2.9
openSUSE Leap 15.3	poppler	0.62.0-4.6.1