The tiffdocumentrender() and tiffdocumentget_thumbnail() functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors from TIFFReadRGBAImageOriented(), leading to uninitialized memory use when processing certain TIFF image files.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "evince-dbg": "3.18.2-1ubuntu4.4", "evince-dbgsym": "3.18.2-1ubuntu4.4", "evince": "3.18.2-1ubuntu4.4", "evince-common": "3.18.2-1ubuntu4.4", "libevview3-3-dbgsym": "3.18.2-1ubuntu4.4", "libevince-dev": "3.18.2-1ubuntu4.4", "evince-gtk": "3.18.2-1ubuntu4.4", "gir1.2-evince-3.0": "3.18.2-1ubuntu4.4", "libevdocument3-4": "3.18.2-1ubuntu4.4", "libevdocument3-4-dbgsym": "3.18.2-1ubuntu4.4", "libevview3-3": "3.18.2-1ubuntu4.4" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "browser-plugin-evince-dbgsym": "3.28.4-0ubuntu1.1", "evince-dbgsym": "3.28.4-0ubuntu1.1", "evince": "3.28.4-0ubuntu1.1", "libevdocument3-4": "3.28.4-0ubuntu1.1", "libevview3-3-dbgsym": "3.28.4-0ubuntu1.1", "evince-common": "3.28.4-0ubuntu1.1", "libevince-dev": "3.28.4-0ubuntu1.1", "gir1.2-evince-3.0": "3.28.4-0ubuntu1.1", "libevview3-3": "3.28.4-0ubuntu1.1", "libevdocument3-4-dbgsym": "3.28.4-0ubuntu1.1", "browser-plugin-evince": "3.28.4-0ubuntu1.1" } ] }