{"id":"OSV-2021-607","aliases":[],"status":"published","title":"Heap-buffer-overflow in TextPool::getPool","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32952\n\n```\nCrash type: Heap-buffer-overflow READ 8\nCrash state:\nTextPool::getPool\nTextPage::coalesce\nTextOutputDev::endPage\n```","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2021-04-07T00:01:06.549627Z","modified":"2023-02-24T01:54:54Z","affected":[{"source":"osv","ecosystem":"OSS-Fuzz","package":"poppler","ranges":[{"type":"GIT","events":[{"introduced":"69d86f90e30785a0db76d3898914de4c0782b947"},{"fixed":"2ed4cd66401bc1d9683c94238e9024218d7be3ba"},{"fixed":"db1bf17777068a34e7586236efefb74a42460932"}]}],"versions":["poppler-0.75.0","poppler-0.76.0","poppler-0.76.1","poppler-0.77.0","poppler-0.78.0","poppler-0.79.0","poppler-0.80.0","poppler-0.81.0","poppler-0.82.0","poppler-0.83.0","poppler-0.84.0","poppler-0.85.0","poppler-0.86.0","poppler-0.86.1","poppler-0.87.0","poppler-0.88.0","poppler-0.89.0","poppler-0.90.0","poppler-0.90.1","poppler-20.08.0","poppler-20.09.0","poppler-20.10.0","poppler-20.11.0","poppler-20.12.0","poppler-20.12.1","poppler-21.01.0","poppler-21.02.0","poppler-21.03.0","poppler-21.04.0"]}],"references":[{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32952","tags":["report"]}],"sources":{"osv":[{"id":"OSV-2021-607","title":"Heap-buffer-overflow in TextPool::getPool","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32952\n\n```\nCrash type: Heap-buffer-overflow READ 8\nCrash state:\nTextPool::getPool\nTextPage::coalesce\nTextOutputDev::endPage\n```\n","status":"published","published":"2021-04-07T00:01:06.549627Z","modified":"2023-02-24T01:54:54.326509Z","updated_at":"2026-11-02T15:52:49.04248Z"}]}}