XP
Product
Xpdf
On CISA KEVExploited in the wild
82
CVEs
1
On KEV
8.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 16Medium 62Low 2
Watch
Add Xpdf to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-7867 | 6.2 | Aug 15 | In Xpdf 4.05 (and earlier), very large coordinates in a page box can cause an integer overflow and divide-by-zero Affected: through 4.05 |
| CVE-2024-7866 | 5.5 | Aug 15 | In Xpdf 4.05 (and earlier), a PDF object loop in a pattern resource leads to infinite recursion and a stack overflow Affected: through 4.05 |
| CVE-2024-4976 | 5.5 | May 15 | Out-of-bounds array write in Xpdf 4.05 and earlier, due to missing object type check in AcroForm field reference Affected: through 4.05 |
| CVE-2024-4568 | 5.5 | May 6 | In Xpdf 4.05 (and earlier), a PDF object loop in the PDF resources leads to infinite recursion and a stack overflow Affected: through 4.05 |
| CVE-2024-4141 | 5.5 | Apr 24 | Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by an invalid character code in a Type 1 font Affected: through 4.05 |
| CVE-2024-3900 | 5.5 | Apr 17 | Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by long Unicode sequence in ActualText Affected: through 4.05 |
| CVE-2024-3248 | 5.5 | Apr 2 | In Xpdf 4.05 (and earlier), a PDF object loop in the attachments leads to infinite recursion and a stack overflow Affected: through 4.05 |
| CVE-2024-3247 | 5.5 | Apr 2 | In Xpdf 4.05 (and earlier), a PDF object loop in an object stream leads to infinite recursion and a stack overflow Affected: through 4.05 |
| CVE-2024-2971 | 5.5 | Mar 26 | Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by negative object number in indirect reference in the input PDF file Affected: through 4.05 |
| CVE-2022-48545 | 5.5 | Aug 22 | An infinite recursion in Catalog::findDestInTree can cause denial of service for xpdf 4.02 Affected: 4.02 |
| CVE-2023-2664 | 5.5 | May 11 | In Xpdf 4.04 (and earlier), a PDF object loop in the embedded file tree leads to infinite recursion and a stack overflow Affected: through 4.04 |
| CVE-2023-2663 | 5.5 | May 11 | In Xpdf 4.04 (and earlier), a PDF object loop in the page label tree leads to infinite recursion and a stack overflow Affected: through 4.04 |
| CVE-2023-2662 | 5.5 | May 11 | In Xpdf 4.04 (and earlier), a bad color space object in the input PDF file can cause a divide-by-zero Affected: through 4.04 |
| CVE-2023-26930 | 5.5 | Apr 26 | Buffer Overflow vulnerability found in XPDF v.4.04 allows an attacker to cause a Denial of Service via the PDFDoc malloc in the pdftotext.cc function Affected: 4.04 |
| CVE-2022-45587 | 5.5 | Feb 15 | Stack overflow vulnerability in function gmalloc in goo/gmem.cc in xpdf 4.04, allows local attackers to cause a denial of service Affected: 4.04 |
| CVE-2022-45586 | 5.5 | Feb 15 | Stack overflow vulnerability in function Dict::find in xpdf/Dict.cc in xpdf 4.04, allows local attackers to cause a denial of service Affected: 4.04 |
| CVE-2022-43071 | 5.5 | Nov 15 | A stack overflow in the Catalog::readPageLabelTree2(Object*) function of XPDF v4.04 allows attackers to cause a Denial of Service (DoS) via a crafted PDF file Affected: 4.04 |
| CVE-2022-43295 | 5.5 | Nov 14 | XPDF v4.04 was discovered to contain a stack overflow via the function FileStream::copy() at xpdf/Stream.cc:795 Affected: 4.04 |
| CVE-2022-41842 | 5.5 | Sep 30 | An issue was discovered in Xpdf 4.04 Affected: 4.04 |
| CVE-2022-41843 | 5.5 | Sep 30 | An issue was discovered in Xpdf 4.04 Affected: 4.04 |
| CVE-2022-41844 | 5.5 | Sep 30 | An issue was discovered in Xpdf 4.04 Affected: 4.04 |
| CVE-2022-38334 | 5.5 | Sep 15 | XPDF v4.04 and earlier was discovered to contain a stack overflow via the function Catalog::countPageTree() at Catalog.cc Affected: through 4.04 |
| CVE-2022-36561 | 5.5 | Aug 30 | XPDF v4.0.4 was discovered to contain a segmentation violation via the component /xpdf/AcroForm.cc:538 Affected: 4.04 |
| CVE-2021-27548 | 5.5 | May 18 | There is a Null Pointer Dereference vulnerability in the XFAScanner::scanNode() function in XFAScanner.cc in xpdf 4.03 Affected: 4.03 |
| CVE-2022-30775 | 5.5 | May 16 | xpdf 4.04 allocates excessive memory when presented with crafted input Affected: 4.04 |
| CVE-2022-27135 | 5.5 | Apr 25 | xpdf 4.03 has heap buffer overflow in the function readXRefTable located in XRef.cc Affected: 4.03 |
| CVE-2020-25725 | 5.5 | Nov 21 | In Xpdf 4.02, SplashOutputDev::endType3Char(GfxState *state) SplashOutputDev.cc:3079 is trying to use the freed `t3GlyphStack->cache`, which causes an `heap-use-after-free`… Affected: 4.02 |
| CVE-2010-0207 | 5.5 | Oct 30 | In xpdf, the xref table contains an infinite loop which allows remote attackers to cause a denial of service (application crash) in xpdf-based PDF viewers Affected: 3.03-17; 3.04-4; 3.04-13 |
| CVE-2010-0206 | 5.5 | Oct 30 | xpdf allows remote attackers to cause a denial of service (NULL pointer dereference and crash) in the way it processes JBIG2 PDF stream objects Affected: 3.03-17; 3.04-4; 3.04-13 |
| CVE-2019-10026 | 5.5 | Mar 25 | An issue was discovered in Xpdf 4.01.01 Affected: 4.01.01 |
| CVE-2019-10025 | 5.5 | Mar 25 | An issue was discovered in Xpdf 4.01.01 Affected: 4.01.01 |
| CVE-2019-10024 | 5.5 | Mar 25 | An issue was discovered in Xpdf 4.01.01 Affected: 4.01.01 |
| CVE-2019-10023 | 5.5 | Mar 25 | An issue was discovered in Xpdf 4.01.01 Affected: 4.01.01 |
| CVE-2019-10022 | 5.5 | Mar 25 | An issue was discovered in Xpdf 4.01.01 Affected: 4.01.01 |
| CVE-2019-10021 | 5.5 | Mar 25 | An issue was discovered in Xpdf 4.01.01 Affected: 4.01.01 |
| CVE-2019-10020 | 5.5 | Mar 25 | An issue was discovered in Xpdf 4.01.01 Affected: 4.01.01 |
| CVE-2019-10019 | 5.5 | Mar 25 | An issue was discovered in Xpdf 4.01.01 Affected: 4.01.01 |
| CVE-2019-10018 | 5.5 | Mar 25 | An issue was discovered in Xpdf 4.01.01 Affected: 4.01.01 |
| CVE-2018-18651 | 5.5 | Oct 25 | An issue was discovered in Xpdf 4.00 Affected: 4.00 |
| CVE-2018-18650 | 5.5 | Oct 25 | An issue was discovered in Xpdf 4.00 Affected: 4.00 |
| CVE-2018-18459 | 5.5 | Oct 18 | The function DCTStream::getBlock in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted pdf file, as demonstrated… Affected: 4.00 |
| CVE-2018-18458 | 5.5 | Oct 18 | The function DCTStream::decodeImage in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted pdf file, as… Affected: 4.00 |
| CVE-2018-18457 | 5.5 | Oct 18 | The function DCTStream::readScan in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted pdf file, as demonstrated… Affected: 4.00 |
| CVE-2018-18456 | 5.5 | Oct 18 | The function Object::isName() in Object.h (called from Gfx::opSetFillColorN) in Xpdf 4.00 allows remote attackers to cause a denial of service (stack-based buffer over-read) via a… Affected: 4.00 |
| CVE-2018-18455 | 5.5 | Oct 18 | The GfxImageColorMap class in GfxState.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted pdf file, as demonstrated… Affected: 4.00 |
| CVE-2018-18454 | 5.5 | Oct 18 | CCITTFaxStream::readRow() in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted pdf file, as demonstrated by… Affected: 4.00 |
| CVE-2018-16369 | 5.5 | Sep 3 | XRef::fetch in XRef.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (stack consumption) via a crafted pdf file, related to AcroForm::scanField, as… Affected: 4.00 |
| CVE-2018-16368 | 5.5 | Sep 3 | SplashXPath::strokeAdjust in splash/SplashXPath.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted pdf file, as… Affected: 4.00 |
| CVE-2018-8107 | 5.5 | Mar 14 | The JPXStream::close function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-based buffer over-read and application crash) via a specific pdf… Affected: 4.00 |
| CVE-2018-8106 | 5.5 | Mar 14 | The JPXStream::readTilePartData function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-based buffer over-read and application crash) via a… Affected: 4.00 |