poppler 0.54.0, as used in Evince and other products, has a NULL pointer dereference in the JPXStream::readUByte function in JPXStream.cc. For example, the perf_test utility will crash (segmentation fault) when parsing an invalid PDF file.
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Poppler | Freedesktop | 0.54.0 (including) | 0.54.0 (including) |
| Luatex | Ubuntu | trusty | * |
| Luatex | Ubuntu | upstream | * |
| Poppler | Ubuntu | artful | * |
| Poppler | Ubuntu | bionic | * |
| Poppler | Ubuntu | cosmic | * |
| Poppler | Ubuntu | devel | * |
| Poppler | Ubuntu | disco | * |
| Poppler | Ubuntu | trusty | * |
| Poppler | Ubuntu | upstream | * |
| Poppler | Ubuntu | vivid/stable-phone-overlay | * |
| Poppler | Ubuntu | xenial | * |
| Poppler | Ubuntu | yakkety | * |
| Poppler | Ubuntu | zesty | * |
| Texlive-bin | Ubuntu | upstream | * |
| Texlive-bin | Ubuntu | yakkety | * |