CVE-2019-14288

An issue was discovered in Xpdf 4.01.01. There is an Integer overflow in the function JBIG2Bitmap::combine at JBIG2Stream.cc for the "one byte per line" case.

• CWE-190

• https://forum.xpdfreader.com/viewtopic.php?f=3&t=41851Exploit, Third Party Advisory
• https://github.com/TeamSeri0us/pocs/tree/master/xpdf/4.01.01Exploit, Third Party Advisory
• https://forum.xpdfreader.com/viewtopic.php?f=3&t=41851Exploit, Third Party Advisory
• https://github.com/TeamSeri0us/pocs/tree/master/xpdf/4.01.01Exploit, Third Party Advisory

Published

Jul 27, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-14281The datagrid gem 1.0.6 for Ruby, as distributed on RubyGems.…
• CVE-2019-14282The simple_captcha2 gem 0.2.3 for Ruby, as distributed on Ru…
• CVE-2019-14283In the Linux kernel before 5.2.3, set_geometry in drivers/bl…
• CVE-2019-14284In the Linux kernel before 5.2.3, drivers/block/floppy.c all…
• CVE-2019-14286In app/webroot/js/event-graph.js in MISP 2.4.111, a stored X…
• CVE-2019-14287In Sudo before 1.8.28, an attacker with access to a Runas AL…8.8
• CVE-2019-14289An issue was discovered in Xpdf 4.01.01. There is an integer…
• CVE-2019-1429A remote code execution vulnerability exists in the way that…7.5
• CVE-2019-14290An issue was discovered in Xpdf 4.01.01. There is an out of …
• CVE-2019-14291An issue was discovered in Xpdf 4.01.01. There is an out of …
• CVE-2019-14292An issue was discovered in Xpdf 4.01.01. There is an out of …
• CVE-2019-14293An issue was discovered in Xpdf 4.01.01. There is an out of …