CVE-2025-32365
Publication date 7 April 2025
Last updated 8 April 2025
Ubuntu priority
Poppler before 25.04.0 allows crafted input files to trigger out-of-bounds reads in the JBIG2Bitmap::combine function in JBIG2Stream.cc because of a misplaced isOk check.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| poppler | 24.10 oracular |
Fixed 24.08.0-1ubuntu0.2
|
| 24.04 LTS noble |
Fixed 24.02.0-1ubuntu9.3
|
|
| 22.04 LTS jammy |
Fixed 22.02.0-2ubuntu0.7
|
|
| 20.04 LTS focal |
Fixed 0.86.1-0ubuntu1.6
|
|
| 18.04 LTS bionic |
Needs evaluation
|
|
| 16.04 LTS xenial |
Needs evaluation
|
Patch details
| Package | Patch details |
|---|---|
| poppler |
|
References
Related Ubuntu Security Notices (USN)
- USN-7426-1
- poppler vulnerabilities
- 8 April 2025
- USN-7426-2
- poppler vulnerabilities
- 9 April 2025