CVE-2024-56378: Freedesktop Poppler

Medium severity, CVSS 4.3. EPSS: 0.6% chance of exploitation in the next 30 days.

libpoppler.so in Poppler through 24.12.0 has an out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc.

Affected products

• Freedesktop Poppler: up to and including 24.12.0

Published 2024-12-23. Last modified 2026-06-17.