XP
Product
Xpdf
On CISA KEVExploited in the wild
82
CVEs
1
On KEV
8.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 16Medium 62Low 2
Watch
Add Xpdf to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-3436 | 3.3 | Jun 27 | Xpdf 4.04 will deadlock on a PDF object stream whose "Length" field is itself in another object stream Affected: 4.04 |
| CVE-2023-3044 | 3.3 | Jun 2 | An excessively large PDF page size (found in fuzz testing, unlikely in normal PDF files) can result in a divide-by-zero in Xpdf's text extraction code Affected: before 4.05 |
Showing 2