Out-of-Bounds Read Vulnerability in Poppler by Freedesktop

CVE-2025-32365

What is CVE-2025-32365?

An out-of-bounds read vulnerability exists in Freedesktop's Poppler PDF rendering library, affecting versions prior to 25.04.0. This vulnerability arises from the JBIG2Bitmap::combine function in JBIG2Stream.cc, where an improper isOk check allows attackers to craft input files that can lead to unintended memory access. Such a flaw potentially allows attackers to exploit the software and access sensitive information or execute arbitrary code, emphasizing the need for prompt software updates and thorough input validation measures to mitigate risks.

References