CVE-2019-9545

An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readTextRegion() located in JBIG2Stream.cc, can be triggered by sending a crafted pdf file to (for example) the pdfimages binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact. This is related to JBIG2Bitmap::clearToZero.

• CWE-674

• https://gitlab.freedesktop.org/poppler/poppler/issues/731Exploit, Third Party Advisory
• https://research.loginsoft.com/bugs/recursive-function-call-in-function-jbig2streamreadtextregion-poppler-0-74-0/Exploit, Third Party Advisory
• https://gitlab.freedesktop.org/poppler/poppler/issues/731Exploit, Third Party Advisory
• https://research.loginsoft.com/bugs/recursive-function-call-in-function-jbig2streamreadtextregion-poppler-0-74-0/Exploit, Third Party Advisory

Published

Mar 1, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-9539: Improper Neutralization of Input During Web Page Generatio…6.1
• CVE-2019-9540: Improper Neutralization of Input During Web Page Generatio…6.1
• CVE-2019-9541: Information Exposure vulnerability in itemlookup.asp of Te…6.1
• CVE-2019-9542: Improper Neutralization of Input During Web Page Generatio…6.1
• CVE-2019-9543An issue was discovered in Poppler 0.74.0. A recursive funct…
• CVE-2019-9544An issue was discovered in Bento4 1.5.1-628. An out of bound…
• CVE-2019-9546SolarWinds Orion Platform before 2018.4 Hotfix 2 allows priv…
• CVE-2019-9547In Storage Performance Development Kit (SPDK) before 19.01, …
• CVE-2019-9548Citrix Application Delivery Management (ADM) 12.1.x before 1…
• CVE-2019-9549An issue was discovered in PopojiCMS v2.0.1. It has CSRF via…
• CVE-2019-9550DhCms through 2017-09-18 has admin.php?r=admin/Index/index X…
• CVE-2019-9551An issue was discovered in DOYO (aka doyocms) 2.3 through 20…