Poppler Out-of-Bounds Read Vulnerability in JBIG2Stream Processing

A vulnerability in Poppler versions prior to 25.04.0 allows crafted input files to cause out-of-bounds read errors in the JBIG2Bitmap::combine function within JBIG2Stream.cc. This issue arises from a misplaced 'isOk' check, which can be exploited by maliciously designed files.

Impact

Exploitation of this vulnerability leads to out-of-bounds read errors, which can potentially be exploited to cause a denial-of-service condition or to read sensitive memory contents.