CVE-2019-12958
Fixed in a distro release EPSS 1%
In Xpdf 4.01.01, a heap-based buffer over-read could be triggered in FoFiType1C::convertToType0 in fofi/FoFiType1C.cc when it is trying to access the second privateDicts array element, because the privateDicts array has only one element allocated.
Products: glyphandcog xpdfreader
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu 16.04 LTS | poppler | 0.41.0-0ubuntu1.6 |
| Ubuntu 18.04 LTS | poppler | 0.57.0-2ubuntu4 |