{"id":"CVE-2019-9545","aliases":["DEBIAN-CVE-2019-9545","EUVD-2019-18917","GHSA-qhp4-37x2-x9w9","SUSE-SU-2023:4270-1","SUSE-SU-2023:4362-1","SUSE-SU-2023:4546-1","SUSE-SU-2023:4562-1","UBUNTU-CVE-2019-9545"],"status":"published","title":"An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream:...","description":"An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readTextRegion() located in JBIG2Stream.cc, can be triggered by sending a crafted pdf file to (for example) the pdfimages binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact. This is related to JBIG2Bitmap::clearToZero.","severity":{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01894,"percentile":0.79753,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-674"],"published":"2019-03-01T19:00:00Z","modified":"2026-10-21T23:00:13Z","affected":[{"source":"osv","ecosystem":"Debian:12","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["22.12.0-2","22.12.0-2+deb12u1","22.12.0-2+deb12u2","22.12.0-2+deb12u3","22.12.0-2.1","22.12.0-2.2","23.08.0-1","23.08.0-2","23.12.0-1","24.02.0-1","24.02.0-2","24.02.0-3","24.02.0-4","24.02.0-5","24.02.0-5+loong64","24.06.0-1","24.06.0-2","24.08.0-1","24.08.0-2","24.08.0-3","24.08.0-4","25.01.0-1","25.01.0-2","25.01.0-3","25.01.0-4","25.01.0-5","25.03.0-1","25.03.0-10","25.03.0-11","25.03.0-11.1","25.03.0-2","25.03.0-3","25.03.0-4","25.03.0-5","25.03.0-6","25.03.0-7","25.03.0-9","26.01.0-1","26.01.0-2","26.01.0-3","26.01.0-4","26.01.0-4.1","26.01.0-5","26.07.0-1","26.07.0-2"]},{"source":"osv","ecosystem":"Debian:13","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["25.03.0-10","25.03.0-11","25.03.0-11.1","25.03.0-5","25.03.0-5+deb13u2","25.03.0-5+deb13u3","25.03.0-5+deb13u4","25.03.0-6","25.03.0-7","25.03.0-9","26.01.0-1","26.01.0-2","26.01.0-3","26.01.0-4","26.01.0-4.1","26.01.0-5","26.07.0-1","26.07.0-2"]},{"source":"osv","ecosystem":"Debian:14","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["25.03.0-10","25.03.0-11","25.03.0-11.1","25.03.0-5","25.03.0-6","25.03.0-7","25.03.0-9","26.01.0-1","26.01.0-2","26.01.0-3","26.01.0-4","26.01.0-4.1","26.01.0-5","26.07.0-1","26.07.0-2"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.62.0-150000.4.31.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-16.40.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"poppler-qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-16.40.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-16.40.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"poppler-qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-16.40.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-16.40.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"poppler-qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-16.40.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.24.4-14.41.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.79.0-150200.3.26.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.79.0-150200.3.26.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.79.0-150200.3.26.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.79.0-150200.3.26.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.79.0-150200.3.26.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.33.0-0ubuntu3","0.37.0-0ubuntu1","0.38.0-0ubuntu1","0.41.0-0ubuntu1","0.41.0-0ubuntu1.1","0.41.0-0ubuntu1.2","0.41.0-0ubuntu1.3","0.41.0-0ubuntu1.4","0.41.0-0ubuntu1.5","0.41.0-0ubuntu1.6","0.41.0-0ubuntu1.7","0.41.0-0ubuntu1.8","0.41.0-0ubuntu1.9","0.41.0-0ubuntu1.10","0.41.0-0ubuntu1.11","0.41.0-0ubuntu1.12","0.41.0-0ubuntu1.13","0.41.0-0ubuntu1.14","0.41.0-0ubuntu1.15","0.41.0-0ubuntu1.16","0.41.0-0ubuntu1.16+esm1","0.41.0-0ubuntu1.16+esm2","0.41.0-0ubuntu1.16+esm3","0.41.0-0ubuntu1.16+esm4","0.41.0-0ubuntu1.16+esm5","0.41.0-0ubuntu1.16+esm6","0.41.0-0ubuntu1.16+esm7","0.41.0-0ubuntu1.16+esm8"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.57.0-2ubuntu4","0.57.0-2ubuntu5","0.62.0-1ubuntu1","0.62.0-2ubuntu1","0.62.0-2ubuntu2","0.62.0-2ubuntu2.1","0.62.0-2ubuntu2.2","0.62.0-2ubuntu2.4","0.62.0-2ubuntu2.5","0.62.0-2ubuntu2.6","0.62.0-2ubuntu2.7","0.62.0-2ubuntu2.8","0.62.0-2ubuntu2.9","0.62.0-2ubuntu2.10","0.62.0-2ubuntu2.11","0.62.0-2ubuntu2.12","0.62.0-2ubuntu2.13","0.62.0-2ubuntu2.14","0.62.0-2ubuntu2.14+esm1","0.62.0-2ubuntu2.14+esm2","0.62.0-2ubuntu2.14+esm3","0.62.0-2ubuntu2.14+esm4","0.62.0-2ubuntu2.14+esm5","0.62.0-2ubuntu2.14+esm6","0.62.0-2ubuntu2.14+esm7","0.62.0-2ubuntu2.14+esm8"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.80.0-0ubuntu1","0.80.0-0ubuntu3","0.80.0-0ubuntu4","0.80.0-0ubuntu5","0.85.0-1ubuntu1","0.85.0-1ubuntu3","0.86.1-0ubuntu1","0.86.1-0ubuntu1.1","0.86.1-0ubuntu1.2","0.86.1-0ubuntu1.3","0.86.1-0ubuntu1.4","0.86.1-0ubuntu1.5","0.86.1-0ubuntu1.6","0.86.1-0ubuntu1.7","0.86.1-0ubuntu1.7+esm1","0.86.1-0ubuntu1.7+esm2","0.86.1-0ubuntu1.7+esm3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.06.1-1","21.11.0-1~ubuntu2","22.02.0-2","22.02.0-2ubuntu0.1","22.02.0-2ubuntu0.2","22.02.0-2ubuntu0.3","22.02.0-2ubuntu0.4","22.02.0-2ubuntu0.5","22.02.0-2ubuntu0.6","22.02.0-2ubuntu0.7","22.02.0-2ubuntu0.8","22.02.0-2ubuntu0.9","22.02.0-2ubuntu0.10","22.02.0-2ubuntu0.11","22.02.0-2ubuntu0.12","22.02.0-2ubuntu0.13","22.02.0-2ubuntu0.14","22.02.0-2ubuntu0.15"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["23.08.0-2ubuntu1","23.12.0-1ubuntu2","24.02.0-1ubuntu2","24.02.0-1ubuntu8","24.02.0-1ubuntu9","24.02.0-1ubuntu9.1","24.02.0-1ubuntu9.2","24.02.0-1ubuntu9.3","24.02.0-1ubuntu9.4","24.02.0-1ubuntu9.5","24.02.0-1ubuntu9.6","24.02.0-1ubuntu9.7","24.02.0-1ubuntu9.8","24.02.0-1ubuntu9.9","24.02.0-1ubuntu9.10","24.02.0-1ubuntu9.11"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["25.03.0-3","25.03.0-4","25.03.0-4build1","25.03.0-4ubuntu1","25.03.0-5","25.03.0-6","25.03.0-7","25.03.0-10","25.03.0-10ubuntu0.1","25.03.0-10ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["26.01.0-2build2","26.01.0-5","26.07.0-0ubuntu1","26.07.0-2","26.07.0-2ubuntu1","26.07.0-2ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["25.03.0-10","25.03.0-11.1","26.01.0-2build2","26.01.0-2ubuntu0.1","26.01.0-2ubuntu0.2","26.01.0-2ubuntu0.3"]}],"products":[{"vendor":"freedesktop","product":"poppler"}],"references":[{"url":"https://gitlab.freedesktop.org/poppler/poppler/issues/731","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence"]},{"url":"https://research.loginsoft.com/bugs/recursive-function-call-in-function-jbig2streamreadtextregion-poppler-0-74-0/","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9545"},{"url":"https://github.com/advisories/GHSA-qhp4-37x2-x9w9"},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-9545","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234270-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1128114","tags":["report"]},{"url":"https://bugzilla.suse.com/1214726","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9545","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-37052","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234362-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1112424","tags":["report"]},{"url":"https://bugzilla.suse.com/1112428","tags":["report"]},{"url":"https://bugzilla.suse.com/1129202","tags":["report"]},{"url":"https://bugzilla.suse.com/1140745","tags":["report"]},{"url":"https://bugzilla.suse.com/1143570","tags":["report"]},{"url":"https://bugzilla.suse.com/1214256","tags":["report"]},{"url":"https://bugzilla.suse.com/1214723","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18454","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18456","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13287","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14292","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9631","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-36023","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48545","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234546-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234562-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-9545","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-9545","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2019-9545","description":"An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readTextRegion() located in JBIG2Stream.cc, can be triggered by sending a crafted pdf file to (for example) the pdfimages binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact. This is related to JBIG2Bitmap::clearToZero.","status":"published","published":"2019-03-01T19:00:00Z","modified":"2024-08-04T21:54:44.574Z","updated_at":"2026-11-02T14:20:20.397093Z"}],"euvd":[{"id":"EUVD-2019-18917","description":"An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readTextRegion() located in JBIG2Stream.cc, can be triggered by sending a crafted pdf file to (for example) the pdfimages binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact. This is related to JBIG2Bitmap::clearToZero.","status":"published","published":"2019-03-01T19:00:00Z","modified":"2024-08-04T21:54:44Z","updated_at":"2026-11-03T03:06:38.242317Z"}],"ghsa":[{"id":"GHSA-qhp4-37x2-x9w9","title":"An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream:...","description":"An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readTextRegion() located in JBIG2Stream.cc, can be triggered by sending a crafted pdf file to (for example) the pdfimages binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact. This is related to JBIG2Bitmap::clearToZero.","status":"published","published":"2022-05-13T01:08:19Z","modified":"2023-02-01T05:03:17Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-674"],"updated_at":"2026-11-02T14:50:02.739665Z"}],"nvd":[{"id":"CVE-2019-9545","description":"An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readTextRegion() located in JBIG2Stream.cc, can be triggered by sending a crafted pdf file to (for example) the pdfimages binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact. This is related to JBIG2Bitmap::clearToZero.","status":"published","published":"2019-03-01T19:29:02.93Z","modified":"2026-06-17T02:43:55.67Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-674"],"updated_at":"2026-11-02T14:05:07.268578Z"}],"osv":[{"id":"CVE-2019-9545","description":"An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readTextRegion() located in JBIG2Stream.cc, can be triggered by sending a crafted pdf file to (for example) the pdfimages binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact. This is related to JBIG2Bitmap::clearToZero.","status":"published","published":"2019-03-01T19:29:02.93Z","modified":"2026-10-20T10:50:57.106902355Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:12.974481Z"},{"id":"DEBIAN-CVE-2019-9545","description":"An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readTextRegion() located in JBIG2Stream.cc, can be triggered by sending a crafted pdf file to (for example) the pdfimages binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact. This is related to JBIG2Bitmap::clearToZero.","status":"published","published":"2019-03-01T19:29:02.93Z","modified":"2026-09-21T07:02:15.254735007Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:32.57265Z"},{"id":"UBUNTU-CVE-2019-9545","description":"An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readTextRegion() located in JBIG2Stream.cc, can be triggered by sending a crafted pdf file to (for example) the pdfimages binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact. This is related to JBIG2Bitmap::clearToZero.","status":"published","published":"2019-03-01T19:29:00Z","modified":"2026-10-21T23:00:13.255745572Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:22.212782Z"},{"id":"SUSE-SU-2023:4270-1","title":"Security update for poppler","description":"This update for poppler fixes the following issues:\n\n- CVE-2019-9545: Fixed an uncontrolled recursion issue that could\n  cause a crash (bsc#1128114).\n- CVE-2022-37052: Fixed a crash that could be triggered when opening\n  a crafted file (bsc#1214726).\n","status":"published","published":"2023-10-30T16:50:51Z","modified":"2026-02-04T02:21:42.219246Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4362-1","title":"Security update for poppler","description":"This update for poppler fixes the following issues:\n\n- CVE-2019-9545: Fixed a potential crash due to uncontrolled recursion\n  in the JBIG parser (bsc#1128114).\n- CVE-2019-9631: Fixed an out of bounds read when converting a PDF to\n  an image (bsc#1129202).\n- CVE-2022-37052: Fixed a reachable assertion when extracting pages of\n  a PDf file (bsc#1214726).\n- CVE-2020-36023: Fixed a stack bugger overflow in\n  FoFiType1C:cvtGlyph (bsc#1214256).\n- CVE-2019-13287: Fixed an out-of-bounds read vulnerability in the\n  function SplashXPath:strokeAdjust (bsc#1140745).\n- CVE-2018-18456: Fixed a stack-based buffer over-read via a crafted\n  pdf file (bsc#1112428).\n- CVE-2018-18454: Fixed heap-based buffer over-read via a crafted pdf\n  file (bsc#1112424).\n- CVE-2019-14292: Fixed an out of bounds read in GfxState.cc\n  (bsc#1143570).\n- CVE-2022-48545: Fixed an infinite recursion in\n  Catalog::findDestInTree which can cause denial of service\n  (bsc#1214723).\n","status":"published","published":"2023-11-03T12:48:58Z","modified":"2026-02-04T02:19:12.409862Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4546-1","title":"Security update for poppler","description":"This update for poppler fixes the following issues:\n\n- CVE-2019-9545: Fixed a potential crash due to uncontrolled recursion\n  in the JBIG parser (bsc#1128114).\n- CVE-2019-9631: Fixed an out of bounds read when converting a PDF to\n  an image (bsc#1129202).\n- CVE-2022-37052: Fixed a reachable assertion when extracting pages of\n  a PDf file (bsc#1214726).\n- CVE-2020-36023: Fixed a stack bugger overflow in\n  FoFiType1C:cvtGlyph (bsc#1214256).\n- CVE-2019-14292: Fixed an out of bounds read in GfxState.cc\n  (bsc#1143570).\n- CVE-2022-48545: Fixed an infinite recursion in\n  Catalog::findDestInTree which can cause denial of service\n  (bsc#1214723).\n","status":"published","published":"2023-11-24T08:11:55Z","modified":"2026-02-04T04:29:29.114918Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4562-1","title":"Security update for poppler","description":"This update for poppler fixes the following issues:\n\n- CVE-2019-9545: Fixed an uncontrolled recursion issue that could\n  cause a crash (bsc#1128114).\n- CVE-2022-37052: Fixed a crash that could be triggered when opening\n  a crafted file (bsc#1214726).\n- CVE-2020-36023: Fixed a stack bugger overflow in FoFiType1C:cvtGlyph (bsc#1214256).\n","status":"published","published":"2023-11-24T16:12:20Z","modified":"2026-02-04T04:00:42.397586Z","updated_at":"2026-11-02T15:53:53.865042Z"}]}}