ECHO-9cd8-33f8-0f42

See a problem?
Import Source
https://advisory.echohq.com/osv/ECHO-9cd8-33f8-0f42.json
JSON Data
https://api.osv.dev/v1/vulns/ECHO-9cd8-33f8-0f42
Upstream
Withdrawn
2025-12-09T15:30:04Z
Published
2025-09-15T01:08:53Z
Modified
2026-09-15T03:33:36Z
Summary
Debian's poppler links against libjpeg which is unaffected by this vulnerability. The vulnerable code is in Poppler's internal JPEG decoder which Debian does not use. https://talosintelligence.com/vulnerability_reports/TALOS-2017-0319
Details
References

Affected packages

Echo / poppler

Package

Name
poppler
Purl
pkg:deb/echo/poppler

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
25.03.0-5+deb13u2+e1

Database specific

source 
"https://advisory.echohq.com/osv/ECHO-9cd8-33f8-0f42.json"