# CVE-2024-6239: poppler: A flaw was found in the Poppler's Pdfinfo utility

CVE-2024-6239 is fixed in 25 products on 1 platform, first by gir1.2-poppler-0.18 22.02.0-2ubuntu0.5, released June 21, 2024. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2024-6239
- Priority: High
- CVSS: 7.5 (high)
- EPSS: 0.0079
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Jun 21, 2024

## Description

A flaw was found in the Poppler's Pdfinfo utility. This issue occurs when using -dests parameter with pdfinfo utility. By using certain malformed input files, an attacker could cause the utility to crash, leading to a denial of service.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | gir1.2-poppler-0.18 Ubuntu 22.04.1 LTS (jammy) | 22.02.0-2ubuntu0.5 | [gir1.2-poppler-0.18 22.02.0-2ubuntu0.5](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-gir1.2-poppler-0.18-22.02.0-2ubuntu0.5.md) | Jun 21, 2024 |
| Linux | gir1.2-poppler-0.18 Ubuntu 24.04.5 LTS (noble) | 24.02.0-1ubuntu9.1 | [gir1.2-poppler-0.18 24.02.0-1ubuntu9.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-gir1.2-poppler-0.18-24.02.0-1ubuntu9.1.md) | Jun 21, 2024 |
| Linux | libpoppler-cpp0t64 Ubuntu 24.04.5 LTS (noble) | 24.02.0-1ubuntu9.1 | [libpoppler-cpp0t64 24.02.0-1ubuntu9.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libpoppler-cpp0t64-24.02.0-1ubuntu9.1.md) | Jun 21, 2024 |
| Linux | libpoppler-cpp0v5 Ubuntu 22.04.1 LTS (jammy) | 22.02.0-2ubuntu0.5 | [libpoppler-cpp0v5 22.02.0-2ubuntu0.5](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libpoppler-cpp0v5-22.02.0-2ubuntu0.5.md) | Jun 21, 2024 |
| Linux | libpoppler-glib8 Ubuntu 22.04.1 LTS (jammy) | 22.02.0-2ubuntu0.5 | [libpoppler-glib8 22.02.0-2ubuntu0.5](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libpoppler-glib8-22.02.0-2ubuntu0.5.md) | Jun 21, 2024 |
| Linux | libpoppler-glib8t64 Ubuntu 24.04.5 LTS (noble) | 24.02.0-1ubuntu9.1 | [libpoppler-glib8t64 24.02.0-1ubuntu9.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libpoppler-glib8t64-24.02.0-1ubuntu9.1.md) | Jun 21, 2024 |
| Linux | libpoppler-qt5-1 Ubuntu 22.04.1 LTS (jammy) | 22.02.0-2ubuntu0.5 | [libpoppler-qt5-1 22.02.0-2ubuntu0.5](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libpoppler-qt5-1-22.02.0-2ubuntu0.5.md) | Jun 21, 2024 |
| Linux | libpoppler-qt5-1t64 Ubuntu 24.04.5 LTS (noble) | 24.02.0-1ubuntu9.1 | [libpoppler-qt5-1t64 24.02.0-1ubuntu9.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libpoppler-qt5-1t64-24.02.0-1ubuntu9.1.md) | Jun 21, 2024 |
| Linux | libpoppler-qt6-3t64 Ubuntu 24.04.5 LTS (noble) | 24.02.0-1ubuntu9.1 | [libpoppler-qt6-3t64 24.02.0-1ubuntu9.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libpoppler-qt6-3t64-24.02.0-1ubuntu9.1.md) | Jun 21, 2024 |
| Linux | libpoppler118 Ubuntu 22.04.1 LTS (jammy) | 22.02.0-2ubuntu0.5 | [libpoppler118 22.02.0-2ubuntu0.5](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libpoppler118-22.02.0-2ubuntu0.5.md) | Jun 21, 2024 |
| Linux | libpoppler134 Ubuntu 24.04.5 LTS (noble) | 24.02.0-1ubuntu9.1 | [libpoppler134 24.02.0-1ubuntu9.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libpoppler134-24.02.0-1ubuntu9.1.md) | Jun 21, 2024 |
| Linux | poppler Debian 12.15 (bookworm) | 22.12.0-2+deb12u3 | [DEBIAN-CVE-2024-6239](https://patchblox.com/security/data/fix/linux/debian-cve-2024-6239.md) | Jun 21, 2024 |
| Linux | poppler Debian 13.5 (trixie) | 24.08.0-2 | [DEBIAN-CVE-2024-6239](https://patchblox.com/security/data/fix/linux/debian-cve-2024-6239.md) | Jun 21, 2024 |
| Linux | poppler Debian 14 | 24.08.0-2 | [DEBIAN-CVE-2024-6239](https://patchblox.com/security/data/fix/linux/debian-cve-2024-6239.md) | Jun 21, 2024 |
| Linux | poppler RHEL 8 | 0:20.11.0-12.el8_10 | [RHSA-2024:5305](https://patchblox.com/security/data/fix/linux/rhsa-2024-5305.md) | Aug 13, 2024 |
| Linux | poppler RHEL 9 | 0:21.01.0-21.el9 | [RHSA-2024:9167](https://patchblox.com/security/data/fix/linux/rhsa-2024-9167.md) | Nov 12, 2024 |
| Linux | poppler almalinux 8 | 20.11.0-12.el8_10 | [ALSA-2024:5305](https://patchblox.com/security/data/fix/linux/alsa-2024-5305.md) | Aug 13, 2024 |
| Linux | poppler almalinux 9 | 21.01.0-21.el9 | [ALSA-2024:9167](https://patchblox.com/security/data/fix/linux/alsa-2024-9167.md) | Nov 12, 2024 |
| Linux | poppler amzn 2023 | 22.08.0-3.amzn2023.0.5 | [ALAS2023-2024-741](https://patchblox.com/security/data/fix/linux/alas2023-2024-741.md) | Oct 24, 2024 |
| Linux | poppler ol 8 | 0:20.11.0-12.el8_10 | [ELSA-2024-5305](https://patchblox.com/security/data/fix/linux/elsa-2024-5305.md) | Aug 14, 2024 |
| Linux | poppler ol 9 | 0:21.01.0-21.el9 | [ELSA-2024-9167](https://patchblox.com/security/data/fix/linux/elsa-2024-9167.md) | Nov 14, 2024 |
| Linux | poppler rocky 8 | 0:20.11.0-12.el8_10 | [RLSA-2024:5305](https://patchblox.com/security/data/fix/linux/rlsa-2024-5305.md) | May 7, 2025 |
| Linux | poppler rocky 9 | 0:21.01.0-21.el9 | [RLSA-2024:9167](https://patchblox.com/security/data/fix/linux/rlsa-2024-9167.md) | Mar 17, 2025 |
| Linux | poppler sles 15.6 | 0.79.0-150200.3.32.1 | [SUSE-SU-2024:2334-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-2334-1.md) | Jul 8, 2024 |
| Linux | poppler-cpp RHEL 8 | 0:20.11.0-12.el8_10 | [RHSA-2024:5305](https://patchblox.com/security/data/fix/linux/rhsa-2024-5305.md) | Aug 13, 2024 |
| Linux | poppler-cpp RHEL 9 | 0:21.01.0-21.el9 | [RHSA-2024:9167](https://patchblox.com/security/data/fix/linux/rhsa-2024-9167.md) | Nov 12, 2024 |
| Linux | poppler-cpp almalinux 8 | 20.11.0-12.el8_10 | [ALSA-2024:5305](https://patchblox.com/security/data/fix/linux/alsa-2024-5305.md) | Aug 13, 2024 |
| Linux | poppler-cpp almalinux 9 | 21.01.0-21.el9 | [ALSA-2024:9167](https://patchblox.com/security/data/fix/linux/alsa-2024-9167.md) | Nov 12, 2024 |
| Linux | poppler-cpp amzn 2023 | 22.08.0-3.amzn2023.0.5 | [ALAS2023-2024-741](https://patchblox.com/security/data/fix/linux/alas2023-2024-741.md) | Oct 24, 2024 |
| Linux | poppler-cpp ol 8 | 0:20.11.0-12.el8_10 | [ELSA-2024-5305](https://patchblox.com/security/data/fix/linux/elsa-2024-5305.md) | Aug 14, 2024 |
| Linux | poppler-cpp ol 9 | 0:21.01.0-21.el9 | [ELSA-2024-9167](https://patchblox.com/security/data/fix/linux/elsa-2024-9167.md) | Nov 14, 2024 |
| Linux | poppler-cpp-debuginfo amzn 2023 | 22.08.0-3.amzn2023.0.5 | [ALAS2023-2024-741](https://patchblox.com/security/data/fix/linux/alas2023-2024-741.md) | Oct 24, 2024 |
| Linux | poppler-cpp-devel RHEL 8 | 0:20.11.0-12.el8_10 | [RHSA-2024:5305](https://patchblox.com/security/data/fix/linux/rhsa-2024-5305.md) | Aug 13, 2024 |
| Linux | poppler-cpp-devel RHEL 9 | 0:21.01.0-21.el9 | [RHSA-2024:9167](https://patchblox.com/security/data/fix/linux/rhsa-2024-9167.md) | Nov 12, 2024 |
| Linux | poppler-cpp-devel almalinux 8 | 20.11.0-12.el8_10 | [ALSA-2024:5305](https://patchblox.com/security/data/fix/linux/alsa-2024-5305.md) | Aug 13, 2024 |
| Linux | poppler-cpp-devel almalinux 9 | 21.01.0-21.el9 | [ALSA-2024:9167](https://patchblox.com/security/data/fix/linux/alsa-2024-9167.md) | Nov 12, 2024 |
| Linux | poppler-cpp-devel amzn 2023 | 22.08.0-3.amzn2023.0.5 | [ALAS2023-2024-741](https://patchblox.com/security/data/fix/linux/alas2023-2024-741.md) | Oct 24, 2024 |
| Linux | poppler-cpp-devel ol 8 | 0:20.11.0-12.el8_10 | [ELSA-2024-5305](https://patchblox.com/security/data/fix/linux/elsa-2024-5305.md) | Aug 14, 2024 |
| Linux | poppler-cpp-devel ol 9 | 0:21.01.0-21.el9 | [ELSA-2024-9167](https://patchblox.com/security/data/fix/linux/elsa-2024-9167.md) | Nov 14, 2024 |
| Linux | poppler-debuginfo amzn 2023 | 22.08.0-3.amzn2023.0.5 | [ALAS2023-2024-741](https://patchblox.com/security/data/fix/linux/alas2023-2024-741.md) | Oct 24, 2024 |
| Linux | poppler-debugsource amzn 2023 | 22.08.0-3.amzn2023.0.5 | [ALAS2023-2024-741](https://patchblox.com/security/data/fix/linux/alas2023-2024-741.md) | Oct 24, 2024 |
| Linux | poppler-devel RHEL 8 | 0:20.11.0-12.el8_10 | [RHSA-2024:5305](https://patchblox.com/security/data/fix/linux/rhsa-2024-5305.md) | Aug 13, 2024 |
| Linux | poppler-devel RHEL 9 | 0:21.01.0-21.el9 | [RHSA-2024:9167](https://patchblox.com/security/data/fix/linux/rhsa-2024-9167.md) | Nov 12, 2024 |
| Linux | poppler-devel almalinux 8 | 20.11.0-12.el8_10 | [ALSA-2024:5305](https://patchblox.com/security/data/fix/linux/alsa-2024-5305.md) | Aug 13, 2024 |
| Linux | poppler-devel almalinux 9 | 21.01.0-21.el9 | [ALSA-2024:9167](https://patchblox.com/security/data/fix/linux/alsa-2024-9167.md) | Nov 12, 2024 |
| Linux | poppler-devel amzn 2023 | 22.08.0-3.amzn2023.0.5 | [ALAS2023-2024-741](https://patchblox.com/security/data/fix/linux/alas2023-2024-741.md) | Oct 24, 2024 |
| Linux | poppler-devel ol 8 | 0:20.11.0-12.el8_10 | [ELSA-2024-5305](https://patchblox.com/security/data/fix/linux/elsa-2024-5305.md) | Aug 14, 2024 |
| Linux | poppler-devel ol 9 | 0:21.01.0-21.el9 | [ELSA-2024-9167](https://patchblox.com/security/data/fix/linux/elsa-2024-9167.md) | Nov 14, 2024 |
| Linux | poppler-glib RHEL 8 | 0:20.11.0-12.el8_10 | [RHSA-2024:5305](https://patchblox.com/security/data/fix/linux/rhsa-2024-5305.md) | Aug 13, 2024 |
| Linux | poppler-glib RHEL 9 | 0:21.01.0-21.el9 | [RHSA-2024:9167](https://patchblox.com/security/data/fix/linux/rhsa-2024-9167.md) | Nov 12, 2024 |
| Linux | poppler-glib almalinux 8 | 20.11.0-12.el8_10 | [ALSA-2024:5305](https://patchblox.com/security/data/fix/linux/alsa-2024-5305.md) | Aug 13, 2024 |
| Linux | poppler-glib almalinux 9 | 21.01.0-21.el9 | [ALSA-2024:9167](https://patchblox.com/security/data/fix/linux/alsa-2024-9167.md) | Nov 12, 2024 |
| Linux | poppler-glib amzn 2023 | 22.08.0-3.amzn2023.0.5 | [ALAS2023-2024-741](https://patchblox.com/security/data/fix/linux/alas2023-2024-741.md) | Oct 24, 2024 |
| Linux | poppler-glib ol 8 | 0:20.11.0-12.el8_10 | [ELSA-2024-5305](https://patchblox.com/security/data/fix/linux/elsa-2024-5305.md) | Aug 14, 2024 |
| Linux | poppler-glib ol 9 | 0:21.01.0-21.el9 | [ELSA-2024-9167](https://patchblox.com/security/data/fix/linux/elsa-2024-9167.md) | Nov 14, 2024 |
| Linux | poppler-glib-debuginfo amzn 2023 | 22.08.0-3.amzn2023.0.5 | [ALAS2023-2024-741](https://patchblox.com/security/data/fix/linux/alas2023-2024-741.md) | Oct 24, 2024 |
| Linux | poppler-glib-devel RHEL 8 | 0:20.11.0-12.el8_10 | [RHSA-2024:5305](https://patchblox.com/security/data/fix/linux/rhsa-2024-5305.md) | Aug 13, 2024 |
| Linux | poppler-glib-devel RHEL 9 | 0:21.01.0-21.el9 | [RHSA-2024:9167](https://patchblox.com/security/data/fix/linux/rhsa-2024-9167.md) | Nov 12, 2024 |
| Linux | poppler-glib-devel almalinux 8 | 20.11.0-12.el8_10 | [ALSA-2024:5305](https://patchblox.com/security/data/fix/linux/alsa-2024-5305.md) | Aug 13, 2024 |
| Linux | poppler-glib-devel almalinux 9 | 21.01.0-21.el9 | [ALSA-2024:9167](https://patchblox.com/security/data/fix/linux/alsa-2024-9167.md) | Nov 12, 2024 |
| Linux | poppler-glib-devel amzn 2023 | 22.08.0-3.amzn2023.0.5 | [ALAS2023-2024-741](https://patchblox.com/security/data/fix/linux/alas2023-2024-741.md) | Oct 24, 2024 |
| Linux | poppler-glib-devel ol 8 | 0:20.11.0-12.el8_10 | [ELSA-2024-5305](https://patchblox.com/security/data/fix/linux/elsa-2024-5305.md) | Aug 14, 2024 |
| Linux | poppler-glib-devel ol 9 | 0:21.01.0-21.el9 | [ELSA-2024-9167](https://patchblox.com/security/data/fix/linux/elsa-2024-9167.md) | Nov 14, 2024 |
| Linux | poppler-glib-doc RHEL 8 | 0:20.11.0-12.el8_10 | [RHSA-2024:5305](https://patchblox.com/security/data/fix/linux/rhsa-2024-5305.md) | Aug 13, 2024 |
| Linux | poppler-glib-doc RHEL 9 | 0:21.01.0-21.el9 | [RHSA-2024:9167](https://patchblox.com/security/data/fix/linux/rhsa-2024-9167.md) | Nov 12, 2024 |
| Linux | poppler-glib-doc almalinux 8 | 20.11.0-12.el8_10 | [ALSA-2024:5305](https://patchblox.com/security/data/fix/linux/alsa-2024-5305.md) | Aug 13, 2024 |
| Linux | poppler-glib-doc almalinux 9 | 21.01.0-21.el9 | [ALSA-2024:9167](https://patchblox.com/security/data/fix/linux/alsa-2024-9167.md) | Nov 12, 2024 |
| Linux | poppler-glib-doc amzn 2023 | 22.08.0-3.amzn2023.0.5 | [ALAS2023-2024-741](https://patchblox.com/security/data/fix/linux/alas2023-2024-741.md) | Oct 24, 2024 |
| Linux | poppler-glib-doc ol 8 | 0:20.11.0-12.el8_10 | [ELSA-2024-5305](https://patchblox.com/security/data/fix/linux/elsa-2024-5305.md) | Aug 14, 2024 |
| Linux | poppler-glib-doc ol 9 | 0:21.01.0-21.el9 | [ELSA-2024-9167](https://patchblox.com/security/data/fix/linux/elsa-2024-9167.md) | Nov 14, 2024 |
| Linux | poppler-qt5 RHEL 8 | 0:20.11.0-12.el8_10 | [RHSA-2024:5305](https://patchblox.com/security/data/fix/linux/rhsa-2024-5305.md) | Aug 13, 2024 |
| Linux | poppler-qt5 RHEL 9 | 0:21.01.0-21.el9 | [RHSA-2024:9167](https://patchblox.com/security/data/fix/linux/rhsa-2024-9167.md) | Nov 12, 2024 |
| Linux | poppler-qt5 almalinux 8 | 20.11.0-12.el8_10 | [ALSA-2024:5305](https://patchblox.com/security/data/fix/linux/alsa-2024-5305.md) | Aug 13, 2024 |
| Linux | poppler-qt5 almalinux 9 | 21.01.0-21.el9 | [ALSA-2024:9167](https://patchblox.com/security/data/fix/linux/alsa-2024-9167.md) | Nov 12, 2024 |
| Linux | poppler-qt5 ol 8 | 0:20.11.0-12.el8_10 | [ELSA-2024-5305](https://patchblox.com/security/data/fix/linux/elsa-2024-5305.md) | Aug 14, 2024 |
| Linux | poppler-qt5 ol 9 | 0:21.01.0-21.el9 | [ELSA-2024-9167](https://patchblox.com/security/data/fix/linux/elsa-2024-9167.md) | Nov 14, 2024 |
| Linux | poppler-qt5-devel RHEL 8 | 0:20.11.0-12.el8_10 | [RHSA-2024:5305](https://patchblox.com/security/data/fix/linux/rhsa-2024-5305.md) | Aug 13, 2024 |
| Linux | poppler-qt5-devel RHEL 9 | 0:21.01.0-21.el9 | [RHSA-2024:9167](https://patchblox.com/security/data/fix/linux/rhsa-2024-9167.md) | Nov 12, 2024 |
| Linux | poppler-qt5-devel almalinux 8 | 20.11.0-12.el8_10 | [ALSA-2024:5305](https://patchblox.com/security/data/fix/linux/alsa-2024-5305.md) | Aug 13, 2024 |
| Linux | poppler-qt5-devel almalinux 9 | 21.01.0-21.el9 | [ALSA-2024:9167](https://patchblox.com/security/data/fix/linux/alsa-2024-9167.md) | Nov 12, 2024 |
| Linux | poppler-qt5-devel ol 8 | 0:20.11.0-12.el8_10 | [ELSA-2024-5305](https://patchblox.com/security/data/fix/linux/elsa-2024-5305.md) | Aug 14, 2024 |
| Linux | poppler-qt5-devel ol 9 | 0:21.01.0-21.el9 | [ELSA-2024-9167](https://patchblox.com/security/data/fix/linux/elsa-2024-9167.md) | Nov 14, 2024 |
| Linux | poppler-utils RHEL 8 | 0:20.11.0-12.el8_10 | [RHSA-2024:5305](https://patchblox.com/security/data/fix/linux/rhsa-2024-5305.md) | Aug 13, 2024 |
| Linux | poppler-utils RHEL 9 | 0:21.01.0-21.el9 | [RHSA-2024:9167](https://patchblox.com/security/data/fix/linux/rhsa-2024-9167.md) | Nov 12, 2024 |
| Linux | poppler-utils Ubuntu 22.04.1 LTS (jammy) | 22.02.0-2ubuntu0.5 | [poppler-utils 22.02.0-2ubuntu0.5](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-poppler-utils-22.02.0-2ubuntu0.5.md) | Jun 21, 2024 |
| Linux | poppler-utils Ubuntu 24.04.5 LTS (noble) | 24.02.0-1ubuntu9.1 | [poppler-utils 24.02.0-1ubuntu9.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-poppler-utils-24.02.0-1ubuntu9.1.md) | Jun 21, 2024 |
| Linux | poppler-utils almalinux 8 | 20.11.0-12.el8_10 | [ALSA-2024:5305](https://patchblox.com/security/data/fix/linux/alsa-2024-5305.md) | Aug 13, 2024 |
| Linux | poppler-utils almalinux 9 | 21.01.0-21.el9 | [ALSA-2024:9167](https://patchblox.com/security/data/fix/linux/alsa-2024-9167.md) | Nov 12, 2024 |
| Linux | poppler-utils amzn 2023 | 22.08.0-3.amzn2023.0.5 | [ALAS2023-2024-741](https://patchblox.com/security/data/fix/linux/alas2023-2024-741.md) | Oct 24, 2024 |
| Linux | poppler-utils ol 8 | 0:20.11.0-12.el8_10 | [ELSA-2024-5305](https://patchblox.com/security/data/fix/linux/elsa-2024-5305.md) | Aug 14, 2024 |
| Linux | poppler-utils ol 9 | 0:21.01.0-21.el9 | [ELSA-2024-9167](https://patchblox.com/security/data/fix/linux/elsa-2024-9167.md) | Nov 14, 2024 |
| Linux | poppler-utils-debuginfo amzn 2023 | 22.08.0-3.amzn2023.0.5 | [ALAS2023-2024-741](https://patchblox.com/security/data/fix/linux/alas2023-2024-741.md) | Oct 24, 2024 |

---

Data as of 2026-11-08T00:53:09Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.