VDB

ALPINE-CVE-2019-9959

ALPINE-CVE-2019-9959 PUBLISHED CVSS 6.5 MEDIUM

The JPXStream::init function in Poppler 0.78.0 and earlier doesn't check for negative values of stream length, leading to an Integer Overflow, thereby making it possible to allocate a large memory chunk on the heap, with a size controlled by an attacker, as demonstrated by pdftocairo.

Risk Scores

CVSS v3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Alpine:v3.23poppler0, 0.71.0-r0, 0.56.0-r1
Alpine:v3.21poppler0, 0.10.7-r0, 0.12.0-r0
Alpine:v3.18poppler0.24.4-r0, 0.71.0-r0, 0.56.0-r1
Alpine:v3.8poppler0, 0.56.0-r1, 0.56.0-r0
Alpine:v3.12poppler0.14.3-r0, 0.14.0-r0, 0.12.4-r1
Alpine:v3.10poppler0.38.0-r0, 0.71.0-r0, 0.56.0-r1
Alpine:v3.16poppler0.16.0-r0, 0.14.5-r0, 0.14.4-r0
Alpine:v3.20poppler0.52.0-r0, 0, 0.10.7-r0
Alpine:v3.17poppler0.40.0-r0, 0.41.0-r0, 0.43.0-r0
Alpine:v3.13poppler0.56.0-r1, 0.40.0-r0, 0.41.0-r0
Alpine:v3.11poppler0.14.4-r0, 0.14.3-r0, 0.14.0-r1
Alpine:v3.15poppler0.39.0-r0, 0.40.0-r0, 0.41.0-r0
Alpine:v3.22poppler0.56.0-r1, 0.18.4-r0, 0.20.0-r0
Alpine:v3.7poppler0, 0.10.7-r0, 0.12.0-r0
Alpine:v3.14poppler0.16.5-r0, 0.18.0-r0, 0.18.2-r0
Alpine:v3.19poppler0.12.3-r2, 0.14.5-r0, 0.16.3-r0
Alpine:v3.9poppler0.12.0-r1, 0.39.0-r0, 0.40.0-r0

Timeline

  • Jul 22, 2019 CVE Published
  • Dec 3, 2025 CVE Updated
  • Apr 30, 2026 Distribution Patch
Open in Interactive Console →
$ Console Community · 100/wk Open console ›