Description
Buffer overflow in the JBIG2Bitmap::JBIG2Bitmap function in JBIG2Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and possibly execute arbitrary code via unknown attack vectors.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | cups | 1.1.22-7 | — |
| Debian 14 | libextractor | 0.5.9-1 | — |
| Debian 14 | xpdf | 3.01-4 | — |
| Debian 13 | cups | 1.1.22-7 | — |
| Debian 13 | libextractor | 0.5.9-1 | — |
| Debian 13 | xpdf | 3.01-4 | — |
| Debian 12 | cups | 1.1.22-7 | — |
| Debian 12 | libextractor | 0.5.9-1 | — |
| Debian 12 | xpdf | 3.01-4 | — |
| Debian 4.0 | gpdf | 2.10.0-1+etch1 | DTSA-28-1 |
| Debian 3.1 | gpdf | 2.8.2-1.2sarge2 | DSA-940-1 |
| Debian 3.1 | kdegraphics | 4:3.3.2-2sarge3 | DSA-932-1 |
| Debian 3.1 | koffice | 1:1.3.5-4.sarge.2 | DSA-938-1 |
| Debian 3.1 | libextractor | 0.4.2-2sarge2 | DSA-936-1 |
| Debian 3.1 | pdfkit.framework | 0.8-2sarge1 | DSA-961-1 |
| Debian 3.1 | pdftohtml | 0.36-11sarge1 | DSA-962-1 |
| Debian 3.1 | tetex-bin | 2.0.2-30sarge4 | DSA-937-1 |
| Debian 3.1 | xpdf | 3.00-13.4 | DSA-931-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | cups +2 | 1:1.1.22-0.rc1.9.9 | RHSA-2005:878 |
| RHEL 4 | gpdf | 2.8.2-7.3 | RHSA-2005:867 |
| RHEL 4 | kdegraphics +1 | 7:3.3.1-3.6 | RHSA-2005:868 |
| RHEL 4 | tetex +6 | 2.0.2-22.EL4.7 | RHSA-2006:0160 |
| RHEL 4 | xpdf | 1:3.00-11.10 | RHSA-2005:840 |
| RHEL 3 | cups +2 | 1:1.1.17-13.3.34 | RHSA-2005:878 |
| RHEL 3 | tetex +5 | 1.0.7-67.9 | RHSA-2006:0160 |
| RHEL 3 | xpdf | 1:2.02-9.8 | RHSA-2005:840 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | cups | 2.3.3op2-4.2 | openSUSE-SU-2024:10707-1 |
Advisories 16
- RHSA-2006:0160 Red Hat Security Advisory: tetex security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2005:878 Red Hat Security Advisory: cups security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2005:868 Red Hat Security Advisory: kdegraphics security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2005:867 Red Hat Security Advisory: gpdf security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2005:840 Red Hat Security Advisory: xpdf security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-936-1 libextractor - buffer overflows Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-962-1 pdftohtml - buffer overflows Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-932-1 kdegraphics - buffer overflows Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-938-1 koffice - buffer overflows Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-940-1 gpdf - buffer overflows Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-950-1 cupsys - buffer overflow Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-937-1 tetex-bin - buffer overflows Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-931-1 xpdf - buffer overflows Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-961-1 pdfkit.framework - buffer overflows Debian Security (DSA / DLA) · Mar 9, 2026
- DTSA-28-1 gpdf - multiple vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:10707-1 cups-2.3.3op2-4.2 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- DSA-932 vendor-advisory
- 18147 third-party-advisory
- 18679 third-party-advisory
- DSA-931 vendor-advisory
- 19230 third-party-advisory
- MDKSA-2006:012 vendor-advisory
- DSA-962 vendor-advisory
- DSA-937 vendor-advisory
- 18398 third-party-advisory
- FLSA-2006:176751 vendor-advisory
- SUSE-SA:2006:001 vendor-advisory
- DSA-936 vendor-advisory
- 18674 third-party-advisory
- 18436 third-party-advisory
- oval:org.mitre.oval:def:10287 vdb-entry signature
- 18428 third-party-advisory
- 18380 third-party-advisory
- 18416 third-party-advisory
- 18407 third-party-advisory
- 18582 third-party-advisory
- 18534 third-party-advisory
- SSA:2006-045-09 vendor-advisory
- 18908 third-party-advisory
- RHSA-2006:0160 vendor-advisory
- MDKSA-2006:010 vendor-advisory
- DSA-940 vendor-advisory
- 18389 third-party-advisory
- SSA:2006-045-04 vendor-advisory
- FLSA:175404 vendor-advisory
- DSA-961 vendor-advisory
- 18675 third-party-advisory
- 18913 third-party-advisory
- DSA-938 vendor-advisory
- DSA-950 vendor-advisory
- 18387 third-party-advisory
- MDKSA-2006:011 vendor-advisory
- 18385 third-party-advisory