Heap-Based Buffer Over-Read in Poppler Affects Multiple Linux Distributions

CVE-2019-9631

What is CVE-2019-9631?

Poppler version 0.74.0 contains a vulnerability that leads to a heap-based buffer over-read within the downsample_row_box_filter function of CairoRescaleBox.cc. This type of flaw can allow attackers to read memory beyond the intended buffer, potentially exposing sensitive data or causing abnormal application behaviors. Various Linux distributions, including Fedora, Debian, and Ubuntu, have been affected, leading to important security advisories and updates to mitigate risks associated with this vulnerability.

References