{"id":"CVE-2019-16115","aliases":["EUVD-2019-6956","GHSA-fx8g-cgwg-pm6c","SUSE-SU-2023:3241-1","SUSE-SU-2023:3292-1","SUSE-SU-2023:3303-1","SUSE-SU-2023:3399-1","UBUNTU-CVE-2019-16115"],"status":"published","title":"In Xpdf 4.01.01, a stack-based buffer under-read could be triggered in IdentityFunction:...","description":"In Xpdf 4.01.01, a stack-based buffer under-read could be triggered in IdentityFunction::transform in Function.cc, used by GfxAxialShading::getColor. It can, for example, be triggered by sending a crafted PDF document to the pdftoppm tool. It allows an attacker to use a crafted PDF file to cause Denial of Service or possibly unspecified other impact.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01058,"percentile":0.6472,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2019-09-08T21:47:57Z","modified":"2026-10-17T12:55:40Z","fixes":[{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"poppler","fixed_in":["0.79.0-150200.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"poppler","fixed_in":["0.79.0-150200.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.2","package":"poppler","fixed_in":["0.79.0-150200.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.2","package":"poppler","fixed_in":["0.79.0-150200.3.14.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"poppler","fixed_in":["0.79.0-150200.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"poppler","fixed_in":["0.24.4-14.29.1","0.43.0-16.28.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"poppler-qt","fixed_in":["0.43.0-16.28.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"poppler","fixed_in":["0.43.0-16.28.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"poppler-qt","fixed_in":["0.43.0-16.28.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"poppler","fixed_in":["0.43.0-16.28.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"poppler-qt","fixed_in":["0.43.0-16.28.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.62.0-150000.4.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.79.0-150200.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.79.0-150200.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.79.0-150200.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.79.0-150200.3.14.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.79.0-150200.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.24.4-14.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-16.28.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"poppler-qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-16.28.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-16.28.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"poppler-qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-16.28.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-16.28.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"poppler-qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-16.28.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"ipe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.1.4-2.1","7.1.8-1","7.1.10-1","7.1.10-1.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"ipe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.2.7-2","7.2.7-3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"ipe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.2.9-1","7.2.13-2","7.2.13-2build1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ipe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.2.23+dfsg1-2","7.2.24+dfsg1-1","7.2.24+dfsg1-1build1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"ipe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.2.27+dfsg1-2","7.2.28-2","7.2.28-2.1build2","7.2.28-2.1build3","7.2.28-2.1build4"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"ipe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.2.30-1build1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"ipe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.2.30-1build2","7.2.30-2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"ipe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.2.30-1build1","7.2.30-1build2"]}],"products":[{"vendor":"glyphandcog","product":"xpdfreader"}],"references":[{"url":"https://forum.xpdfreader.com/viewtopic.php?f=3\u0026t=41872","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16115"},{"url":"https://github.com/advisories/GHSA-fx8g-cgwg-pm6c"},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233241-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1124150","tags":["report"]},{"url":"https://bugzilla.suse.com/1150039","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16115","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-7310","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233292-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233303-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233399-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-16115","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16115","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2019-16115","description":"In Xpdf 4.01.01, a stack-based buffer under-read could be triggered in IdentityFunction::transform in Function.cc, used by GfxAxialShading::getColor. It can, for example, be triggered by sending a crafted PDF document to the pdftoppm tool. It allows an attacker to use a crafted PDF file to cause Denial of Service or possibly unspecified other impact.","status":"published","published":"2019-09-08T21:47:57Z","modified":"2024-08-05T01:03:32.666Z","updated_at":"2026-11-02T14:32:23.189113Z"}],"euvd":[{"id":"EUVD-2019-6956","description":"In Xpdf 4.01.01, a stack-based buffer under-read could be triggered in IdentityFunction::transform in Function.cc, used by GfxAxialShading::getColor. It can, for example, be triggered by sending a crafted PDF document to the pdftoppm tool. It allows an attacker to use a crafted PDF file to cause Denial of Service or possibly unspecified other impact.","status":"published","published":"2019-09-08T21:47:57Z","modified":"2024-08-05T01:03:32Z","updated_at":"2026-11-03T02:40:34.136734Z"}],"ghsa":[{"id":"GHSA-fx8g-cgwg-pm6c","title":"In Xpdf 4.01.01, a stack-based buffer under-read could be triggered in IdentityFunction:...","description":"In Xpdf 4.01.01, a stack-based buffer under-read could be triggered in IdentityFunction::transform in Function.cc, used by GfxAxialShading::getColor. It can, for example, be triggered by sending a crafted PDF document to the pdftoppm tool. It allows an attacker to use a crafted PDF file to cause Denial of Service or possibly unspecified other impact.","status":"published","published":"2022-05-24T22:00:27Z","modified":"2023-01-30T05:04:09Z","updated_at":"2026-11-02T14:46:58.911326Z"}],"nvd":[{"id":"CVE-2019-16115","description":"In Xpdf 4.01.01, a stack-based buffer under-read could be triggered in IdentityFunction::transform in Function.cc, used by GfxAxialShading::getColor. It can, for example, be triggered by sending a crafted PDF document to the pdftoppm tool. It allows an attacker to use a crafted PDF file to cause Denial of Service or possibly unspecified other impact.","status":"published","published":"2019-09-08T22:15:11.82Z","modified":"2026-06-17T02:21:42.157Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:05:25.691233Z"}],"osv":[{"id":"UBUNTU-CVE-2019-16115","description":"In Xpdf 4.01.01, a stack-based buffer under-read could be triggered in IdentityFunction::transform in Function.cc, used by GfxAxialShading::getColor. It can, for example, be triggered by sending a crafted PDF document to the pdftoppm tool. It allows an attacker to use a crafted PDF file to cause Denial of Service or possibly unspecified other impact.","status":"published","published":"2019-09-08T22:15:00Z","modified":"2026-10-17T12:55:40.223699288Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:20.325378Z"},{"id":"SUSE-SU-2023:3241-1","title":"Security update for poppler","description":"This update for poppler fixes the following issues:\n\n- CVE-2019-16115: Fixed an uninitialized memory error in GfxUnivariateShading::setupCache. (bsc#1150039)\n","status":"published","published":"2023-08-08T16:19:22Z","modified":"2026-02-04T03:28:55.021809Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3292-1","title":"Security update for poppler","description":"This update for poppler fixes the following issues:\n\n- CVE-2019-16115: Fixed an uninitialized memory error in GfxUnivariateShading::setupCache. (bsc#1150039)\n","status":"published","published":"2023-08-11T10:52:25Z","modified":"2026-02-04T02:50:04.026076Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3303-1","title":"Security update for poppler","description":"This update for poppler fixes the following issues:\n\n- CVE-2019-16115: Fixed an uninitialized memory error in GfxUnivariateShading::setupCache. (bsc#1150039)\n","status":"published","published":"2023-08-14T08:10:33Z","modified":"2025-05-02T04:30:07.414452Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3399-1","title":"Security update for poppler","description":"This update for poppler fixes the following issues:\n\n- CVE-2019-16115: Fixed an uninitialized memory error in GfxUnivariateShading::setupCache. (bsc#1150039)\n","status":"published","published":"2023-08-23T16:57:01Z","modified":"2026-02-04T04:20:48.156778Z","updated_at":"2026-11-02T15:53:53.440387Z"}]}}