CVE-2009-1179: Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0...

Security readout for executives and security teams

A malicious PDF could trigger a math error in JBIG2 image decoding and potentially run code on the affected system. The named exposure is in older Xpdf, CUPS, Poppler, and products that embedded the same decoder code. Exposure is most likely where legacy Linux, Unix, macOS, printing, document conversion, or PDF-rendering systems process untrusted PDFs using affected Xpdf, CUPS, or Poppler-derived components. Treat as high priority for legacy or document-processing environments. The business risk is code execution from a common file type, but the provided sources do not prove current exploitation. Mitigation focus: Apply vendor security updates from affected operating system or application maintainers.; Prioritize systems that open, print, index, or convert untrusted PDF files.; Upgrade or replace Poppler versions before 0.10.6 where vendor backports do not apply..

Prepared

Jun 28, 2026, 11:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.