{"id":"OSV-2021-607","summary":"Heap-buffer-overflow in TextPool::getPool","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32952\n\n```\nCrash type: Heap-buffer-overflow READ 8\nCrash state:\nTextPool::getPool\nTextPage::coalesce\nTextOutputDev::endPage\n```\n","modified":"2023-02-24T01:54:54.326509Z","published":"2021-04-07T00:01:06.549627Z","references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32952"}],"affected":[{"package":{"name":"poppler","ecosystem":"OSS-Fuzz","purl":"pkg:generic/poppler"},"ranges":[{"type":"GIT","repo":"https://gitlab.freedesktop.org/poppler/poppler.git","events":[{"introduced":"69d86f90e30785a0db76d3898914de4c0782b947"},{"fixed":"2ed4cd66401bc1d9683c94238e9024218d7be3ba"},{"fixed":"db1bf17777068a34e7586236efefb74a42460932"}]}],"versions":["poppler-0.75.0","poppler-0.76.0","poppler-0.76.1","poppler-0.77.0","poppler-0.78.0","poppler-0.79.0","poppler-0.80.0","poppler-0.81.0","poppler-0.82.0","poppler-0.83.0","poppler-0.84.0","poppler-0.85.0","poppler-0.86.0","poppler-0.86.1","poppler-0.87.0","poppler-0.88.0","poppler-0.89.0","poppler-0.90.0","poppler-0.90.1","poppler-20.08.0","poppler-20.09.0","poppler-20.10.0","poppler-20.11.0","poppler-20.12.0","poppler-20.12.1","poppler-21.01.0","poppler-21.02.0","poppler-21.03.0","poppler-21.04.0"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"fixed_range":"29c3fc62d4997bb514d4748cca264fc6868cb52d:db1bf17777068a34e7586236efefb74a42460932","source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/poppler/OSV-2021-607.yaml"}}],"schema_version":"1.7.3"}