XP
Product
Xpdf
On CISA KEVExploited in the wild
82
CVEs
1
On KEV
8.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 16Medium 62Low 2
Watch
Add Xpdf to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-30860 In wildKEV | 7.8 | Aug 24 | Apple Multiple Products Integer Overflow Vulnerability Affected: before 4.04 |
| CVE-2024-7868 | 8.2 | Aug 15 | In Xpdf 4.05 (and earlier), invalid header info in a DCT (JPEG) stream can lead to an uninitialized variable in the DCT decoder Affected: before 4.06 |
| CVE-2022-38928 | 7.8 | Sep 21 | XPDF 4.04 is vulnerable to Null Pointer Dereference in FoFiType1C.cc:2393 Affected: 4.04 |
| CVE-2022-38171 | 7.8 | Aug 22 | Xpdf prior to version 4.04 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIG2Stream.cc) Affected: 4.04 |
| CVE-2022-38222 | 7.8 | Aug 15 | There is a use-after-free issue in JBIG2Stream::close() located in JBIG2Stream.cc in Xpdf 4.04 Affected: 4.04 |
| CVE-2022-33108 | 7.8 | Jun 28 | XPDF v4.04 was discovered to contain a stack overflow vulnerability via the Object::Copy class of object.cc files Affected: 4.04 |
| CVE-2022-30524 | 7.8 | May 9 | There is an invalid memory access in the TextLine class in TextOutputDev.cc in Xpdf 4.0.4 because the text extractor mishandles characters at large y coordinates Affected: 4.0.4 |
| CVE-2020-24999 | 7.8 | Sep 3 | There is an invalid memory access in the function fprintf located in Error.cc in Xpdf 4.0.2 Affected: 4.0.2 |
| CVE-2020-24996 | 7.8 | Sep 3 | There is an invalid memory access in the function TextString::~TextString() located in Catalog.cc in Xpdf 4.0.2 Affected: 4.0.2 |
| CVE-2012-2142 | 7.8 | Jan 9 | The error function in Error.cc in poppler before 0.21.4 allows remote attackers to execute arbitrary commands via a PDF containing an escape sequence for a terminal emulator Affected: 3.02 |
| CVE-2019-9878 | 7.8 | Mar 19 | There is an invalid memory access in the function GfxIndexedColorSpace::mapColorToBase() located in GfxState.cc in Xpdf 4.0.0, as used in pdfalto 0.2 Affected: 4.0.0 |
| CVE-2019-9877 | 7.8 | Mar 19 | There is an invalid memory access vulnerability in the function TextPage::findGaps() located at TextOutputDev.c in Xpdf 4.01, which can (for example) be triggered by sending a… Affected: 4.0.1 |
| CVE-2018-11033 | 7.8 | May 14 | The DCTStream::readHuffSym function in Stream.cc in the DCT decoder in xpdf before 4.00 allows remote attackers to cause a denial of service (application crash) or possibly have… Affected: 4.00 |
| CVE-2018-8100 | 7.8 | Mar 14 | The JPXStream::readTilePart function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-based buffer overflow and application crash) or possibly have… Affected: 4.00 |
| CVE-2021-36493 | 7.5 | Feb 3 | Buffer Overflow vulnerability in pdfimages in xpdf 4.03 allows attackers to crash the application via crafted command Affected: 4.03 |
| CVE-2020-35376 | 7.5 | Dec 26 | Xpdf 4.02 allows stack consumption because of an incorrect subroutine reference in a Type 1C font charstring, related to the FoFiType1C::getOp() function Affected: 4.02 |
Showing 16