CVE-2019-12293: Freedesktop Poppler

High severity, CVSS 8.8. EPSS: 2.1% chance of exploitation in the next 30 days.

In Poppler through 0.76.1, there is a heap-based buffer over-read in JPXStream::init in JPEG2000Stream.cc via data with inconsistent heights or widths.

Affected products

• Freedesktop Poppler: up to and including 0.76.1

Published 2019-05-23. Last modified 2026-06-17.