Medium severity4.3NVD Advisory· Published Dec 23, 2024· Updated Jun 17, 2026
CVE-2024-56378
CVE-2024-56378
Description
libpoppler.so in Poppler through 24.12.0 has an out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
16- Poppler/libpoppler.sodescription
- Range: <=24.12.0
- osv-coords13 versionspkg:rpm/suse/poppler&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP6pkg:rpm/suse/poppler-qt5&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP6pkg:rpm/suse/poppler-qt6&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP6pkg:rpm/opensuse/poppler&distro=openSUSE%20Leap%2015.6pkg:rpm/opensuse/poppler-qt5&distro=openSUSE%20Leap%2015.6pkg:rpm/opensuse/poppler-qt6&distro=openSUSE%20Leap%2015.6pkg:rpm/opensuse/poppler&distro=openSUSE%20Tumbleweedpkg:rpm/suse/poppler&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5pkg:rpm/suse/poppler-qt&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5pkg:rpm/opensuse/poppler&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/poppler-qt5&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/poppler-qt6&distro=openSUSE%20Leap%2015.5pkg:rpm/suse/poppler&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6
< 24.03.0-150600.3.5.1+ 12 more
- (no CPE)range: < 24.03.0-150600.3.5.1
- (no CPE)range: < 24.03.0-150600.3.5.1
- (no CPE)range: < 24.03.0-150600.3.5.1
- (no CPE)range: < 24.03.0-150600.3.5.1
- (no CPE)range: < 24.03.0-150600.3.5.1
- (no CPE)range: < 24.03.0-150600.3.5.1
- (no CPE)range: < 24.12.0-1.1
- (no CPE)range: < 0.43.0-16.52.1
- (no CPE)range: < 0.43.0-16.52.1
- (no CPE)range: < 23.01.0-150500.3.14.1
- (no CPE)range: < 23.01.0-150500.3.14.1
- (no CPE)range: < 23.01.0-150500.3.14.1
- (no CPE)range: < 0.79.0-150200.3.35.1
Patches
Vulnerability mechanics
References
4- gitlab.freedesktop.org/poppler/poppler/-/commit/ade9b5ebed44b0c15522c27669ef6cdf93eff84envdPatch
- gitlab.freedesktop.org/poppler/poppler/-/issues/1553nvdExploitIssue Tracking
- gitlab.freedesktop.org/poppler/poppler/-/blob/30eada0d2bceb42c2d2a87361339063e0b9bea50/CMakeLists.txtnvdProduct
- lists.debian.org/debian-lts-announce/2025/04/msg00037.htmlnvd
News mentions
0No linked articles in our index yet.