High USN-6915-1 1 CVE

poppler vulnerability

Published Jul 24, 2024 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that poppler incorrectly handled certain malformed PDF.
An attacker could possibly use this issue to cause a denial of service.

Fixed packages 2

Release	Package	Fixed in
Ubuntu · 22.04 LTS 22.04:LTS	poppler	22.02.0-2ubuntu0.5
Ubuntu · 24.04 LTS 24.04:LTS	poppler	24.02.0-1ubuntu9.1

Vulnerabilities 1

High 7.5

CVE-2024-6239

Poppler: pdfinfo: crash in broken documents when using -dests parameter

A flaw was found in the Poppler's Pdfinfo utility. This issue occurs when using -dests parameter with pdfinfo utility. By using certain malformed input files, an attacker could cause the utility to crash, leading to a denial of service.

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Alpine

Jun 21, 2024

References

report
https://ubuntu.com/security/CVE-2024-6239