CLSA-2026-1787396206
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787396206.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1787396206
- Upstream
- Published
- 2026-08-22T10:56:56Z
- Modified
- 2026-10-26T09:31:47Z
- Summary
- Fix CVE(s): CVE-2024-6239
- Details
-
- SECURITY UPDATE: crash in pdfinfo -dests on broken documents:
printDestinations() wrapped the destination name returned by
Catalog::getDestNameTreeName() / Catalog::getDestsName() into a new
GooString before testing it, so a document whose name tree is short or
whose /Dests entry is not a dictionary made both getters return NULL and
the GooString constructor dereference it, crashing pdfinfo.
- debian/patches/CVE-2024-6239.patch: read the raw name pointer first and only build the GooString once name, dest and dest->isPageRef() have all been checked, in utils/pdfinfo.cc; matches upstream commit 0554731.
- CVE-2024-6239
- SECURITY UPDATE: crash in pdfinfo -dests on broken documents:
printDestinations() wrapped the destination name returned by
Catalog::getDestNameTreeName() / Catalog::getDestsName() into a new
GooString before testing it, so a document whose name tree is short or
whose /Dests entry is not a dictionary made both getters return NULL and
the GooString constructor dereference it, crashing pdfinfo.
- References