The Poppler fork maintained by Innodata Labs is vulnerable to a high-severity denial-of-service attack due to flaws in its JPEG2000 decoding process.

This vulnerability involves uncontrolled memory usage within the JPX decoder, which can be triggered by an unauthenticated attacker to crash the application.

Successful exploitation leads to a denial-of-service condition, potentially causing system instability or complete application failure. Given the CVSS score of 8.7, this represents a significant risk to availability, especially for systems that rely on this library for image or document processing.

Immediate Action: There is no vendor-provided patch currently available for the Innodata Labs fork. Organizations should consider switching to the upstream version of Poppler, which has removed the vulnerable JPX decoder code.

Proactive Monitoring: Monitor system resource usage, specifically memory consumption, for anomalous spikes when processing JPEG2000 files.

Compensating Controls: Implement input validation or sandboxing for any file processing pipelines that utilize the affected Poppler version to limit the impact of malicious files.

Public Exploit Available: Unknown

Due to the lack of an available patch for the specific Innodata Labs fork, users must prioritize transitioning to a secure alternative or removing the vulnerable JPX component. Immediate migration to the official upstream Poppler project is the recommended path to eliminate this high-severity risk.