High severity · published Mar 1, 2019
CVE-2019-9543
An issue was discovered in Poppler 0.74.0
8.8
CVSS
3.3%
EPSS
No
On KEV
Description
An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readGenericBitmap() located in JBIG2Stream.cc, can be triggered by sending a crafted pdf file to (for example) the pdfseparate binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact. This is related to JArithmeticDecoder::decodeBit.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)3.3% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PO
Poppler · Freedesktop
0.74.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-9543
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-9543
Third Party Advisory
http://www.securityfocus.com/bid/107238
Exploit
https://gitlab.freedesktop.org/poppler/poppler/issues/730
Third Party Advisory
https://research.loginsoft.com/bugs/recursive-function-call-in-function-jbig2streamreadgenericbitmap-poppler-0-74-0/
More from Poppler
7.8
CVE-2021-30860
Apple Multiple Products Integer Overflow Vulnerability
9.8
CVE-2019-9631
Poppler 0.74.0 has a heap-based buffer over-read in the CairoRescaleBox.cc downsample_row_box_filter function
8.8
CVE-2018-21009
Poppler before 0.66.0 has an integer overflow in Parser::makeStream in Parser.cc
8.8
CVE-2019-12293
In Poppler through 0.76.1, there is a heap-based buffer over-read in JPXStream::init in JPEG2000Stream.cc via data with inconsistent heights or widths
8.8
CVE-2019-10872
An issue was discovered in Poppler 0.74.0