XP
Vendor
Xpdfreader
82
CVEs
1
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-7868 | XP Xpdf Xpdfreader | 8.2 | Aug 15 | In Xpdf 4.05 (and earlier), invalid header info in a DCT (JPEG) stream can lead to an uninitialized variable in the DCT decoder |
| CVE-2024-7867 | XP Xpdf Xpdfreader | 6.2 | Aug 15 | In Xpdf 4.05 (and earlier), very large coordinates in a page box can cause an integer overflow and divide-by-zero |
| CVE-2024-7866 | XP Xpdf Xpdfreader | 5.5 | Aug 15 | In Xpdf 4.05 (and earlier), a PDF object loop in a pattern resource leads to infinite recursion and a stack overflow |
| CVE-2024-4976 | XP Xpdf Xpdfreader | 5.5 | May 15 | Out-of-bounds array write in Xpdf 4.05 and earlier, due to missing object type check in AcroForm field reference |
| CVE-2024-4568 | XP Xpdf Xpdfreader | 5.5 | May 6 | In Xpdf 4.05 (and earlier), a PDF object loop in the PDF resources leads to infinite recursion and a stack overflow |
| CVE-2024-4141 | XP Xpdf Xpdfreader | 5.5 | Apr 24 | Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by an invalid character code in a Type 1 font |
| CVE-2024-3900 | XP Xpdf Xpdfreader | 5.5 | Apr 17 | Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by long Unicode sequence in ActualText |
| CVE-2024-3248 | XP Xpdf Xpdfreader | 5.5 | Apr 2 | In Xpdf 4.05 (and earlier), a PDF object loop in the attachments leads to infinite recursion and a stack overflow |
| CVE-2024-3247 | XP Xpdf Xpdfreader | 5.5 | Apr 2 | In Xpdf 4.05 (and earlier), a PDF object loop in an object stream leads to infinite recursion and a stack overflow |
| CVE-2024-2971 | XP Xpdf Xpdfreader | 5.5 | Mar 26 | Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by negative object number in indirect reference in the input PDF file |
| CVE-2022-48545 | XP Xpdf Xpdfreader | 5.5 | Aug 22 | An infinite recursion in Catalog::findDestInTree can cause denial of service for xpdf 4.02 |
| CVE-2023-3436 | XP Xpdf Xpdfreader | 3.3 | Jun 27 | Xpdf 4.04 will deadlock on a PDF object stream whose "Length" field is itself in another object stream |
| CVE-2023-3044 | XP Xpdf Xpdfreader | 3.3 | Jun 2 | An excessively large PDF page size (found in fuzz testing, unlikely in normal PDF files) can result in a divide-by-zero in Xpdf's text extraction code |
| CVE-2023-2664 | XP Xpdf Xpdfreader | 5.5 | May 11 | In Xpdf 4.04 (and earlier), a PDF object loop in the embedded file tree leads to infinite recursion and a stack overflow |
| CVE-2023-2663 | XP Xpdf Xpdfreader | 5.5 | May 11 | In Xpdf 4.04 (and earlier), a PDF object loop in the page label tree leads to infinite recursion and a stack overflow |
| CVE-2023-2662 | XP Xpdf Xpdfreader | 5.5 | May 11 | In Xpdf 4.04 (and earlier), a bad color space object in the input PDF file can cause a divide-by-zero |
| CVE-2023-26930 | XP Xpdf Xpdfreader | 5.5 | Apr 26 | Buffer Overflow vulnerability found in XPDF v.4.04 allows an attacker to cause a Denial of Service via the PDFDoc malloc in the pdftotext.cc function |
| CVE-2022-45587 | XP Xpdf Xpdfreader | 5.5 | Feb 15 | Stack overflow vulnerability in function gmalloc in goo/gmem.cc in xpdf 4.04, allows local attackers to cause a denial of service |
| CVE-2022-45586 | XP Xpdf Xpdfreader | 5.5 | Feb 15 | Stack overflow vulnerability in function Dict::find in xpdf/Dict.cc in xpdf 4.04, allows local attackers to cause a denial of service |
| CVE-2021-36493 | XP Xpdf Xpdfreader | 7.5 | Feb 3 | Buffer Overflow vulnerability in pdfimages in xpdf 4.03 allows attackers to crash the application via crafted command |
| CVE-2022-43071 | XP Xpdf Xpdfreader | 5.5 | Nov 15 | A stack overflow in the Catalog::readPageLabelTree2(Object*) function of XPDF v4.04 allows attackers to cause a Denial of Service (DoS) via a crafted PDF file |
| CVE-2022-43295 | XP Xpdf Xpdfreader | 5.5 | Nov 14 | XPDF v4.04 was discovered to contain a stack overflow via the function FileStream::copy() at xpdf/Stream.cc:795 |
| CVE-2022-41842 | XP Xpdf Xpdfreader | 5.5 | Sep 30 | An issue was discovered in Xpdf 4.04 |
| CVE-2022-41843 | XP Xpdf Xpdfreader | 5.5 | Sep 30 | An issue was discovered in Xpdf 4.04 |
| CVE-2022-41844 | XP Xpdf Xpdfreader | 5.5 | Sep 30 | An issue was discovered in Xpdf 4.04 |
| CVE-2022-38928 | XP Xpdf Xpdfreader | 7.8 | Sep 21 | XPDF 4.04 is vulnerable to Null Pointer Dereference in FoFiType1C.cc:2393 |
| CVE-2022-38334 | XP Xpdf Xpdfreader | 5.5 | Sep 15 | XPDF v4.04 and earlier was discovered to contain a stack overflow via the function Catalog::countPageTree() at Catalog.cc |
| CVE-2022-36561 | XP Xpdf Xpdfreader | 5.5 | Aug 30 | XPDF v4.0.4 was discovered to contain a segmentation violation via the component /xpdf/AcroForm.cc:538 |
| CVE-2022-38171 | XP Xpdf Xpdfreader | 7.8 | Aug 22 | Xpdf prior to version 4.04 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIG2Stream.cc) |
| CVE-2022-38222 | XP Xpdf Xpdfreader | 7.8 | Aug 15 | There is a use-after-free issue in JBIG2Stream::close() located in JBIG2Stream.cc in Xpdf 4.04 |
| CVE-2022-33108 | XP Xpdf Xpdfreader | 7.8 | Jun 28 | XPDF v4.04 was discovered to contain a stack overflow vulnerability via the Object::Copy class of object.cc files |
| CVE-2021-27548 | XP Xpdf Xpdfreader | 5.5 | May 18 | There is a Null Pointer Dereference vulnerability in the XFAScanner::scanNode() function in XFAScanner.cc in xpdf 4.03 |
| CVE-2022-30775 | XP Xpdf Xpdfreader | 5.5 | May 16 | xpdf 4.04 allocates excessive memory when presented with crafted input |
| CVE-2022-30524 | XP Xpdf Xpdfreader | 7.8 | May 9 | There is an invalid memory access in the TextLine class in TextOutputDev.cc in Xpdf 4.0.4 because the text extractor mishandles characters at large y coordinates |
| CVE-2022-27135 | XP Xpdf Xpdfreader | 5.5 | Apr 25 | xpdf 4.03 has heap buffer overflow in the function readXRefTable located in XRef.cc |
| CVE-2021-30860 In wildKEV | XP Xpdf Xpdfreader | 7.8 | Aug 24 | Apple Multiple Products Integer Overflow Vulnerability |
| CVE-2020-35376 | XP Xpdf Xpdfreader | 7.5 | Dec 26 | Xpdf 4.02 allows stack consumption because of an incorrect subroutine reference in a Type 1C font charstring, related to the FoFiType1C::getOp() function |
| CVE-2020-25725 | XP Xpdf Xpdfreader | 5.5 | Nov 21 | In Xpdf 4.02, SplashOutputDev::endType3Char(GfxState *state) SplashOutputDev.cc:3079 is trying to use the freed `t3GlyphStack->cache`, which causes an `heap-use-after-free`… |
| CVE-2020-24999 | XP Xpdf Xpdfreader | 7.8 | Sep 3 | There is an invalid memory access in the function fprintf located in Error.cc in Xpdf 4.0.2 |
| CVE-2020-24996 | XP Xpdf Xpdfreader | 7.8 | Sep 3 | There is an invalid memory access in the function TextString::~TextString() located in Catalog.cc in Xpdf 4.0.2 |
| CVE-2012-2142 | XP Xpdf Xpdfreader | 7.8 | Jan 9 | The error function in Error.cc in poppler before 0.21.4 allows remote attackers to execute arbitrary commands via a PDF containing an escape sequence for a terminal emulator |
| CVE-2010-0207 | XP Xpdf Xpdfreader | 5.5 | Oct 30 | In xpdf, the xref table contains an infinite loop which allows remote attackers to cause a denial of service (application crash) in xpdf-based PDF viewers |
| CVE-2010-0206 | XP Xpdf Xpdfreader | 5.5 | Oct 30 | xpdf allows remote attackers to cause a denial of service (NULL pointer dereference and crash) in the way it processes JBIG2 PDF stream objects |
| CVE-2019-10026 | XP Xpdf Xpdfreader | 5.5 | Mar 25 | An issue was discovered in Xpdf 4.01.01 |
| CVE-2019-10025 | XP Xpdf Xpdfreader | 5.5 | Mar 25 | An issue was discovered in Xpdf 4.01.01 |
| CVE-2019-10024 | XP Xpdf Xpdfreader | 5.5 | Mar 25 | An issue was discovered in Xpdf 4.01.01 |
| CVE-2019-10023 | XP Xpdf Xpdfreader | 5.5 | Mar 25 | An issue was discovered in Xpdf 4.01.01 |
| CVE-2019-10022 | XP Xpdf Xpdfreader | 5.5 | Mar 25 | An issue was discovered in Xpdf 4.01.01 |
| CVE-2019-10021 | XP Xpdf Xpdfreader | 5.5 | Mar 25 | An issue was discovered in Xpdf 4.01.01 |
| CVE-2019-10020 | XP Xpdf Xpdfreader | 5.5 | Mar 25 | An issue was discovered in Xpdf 4.01.01 |
| CVE-2019-10019 | XP Xpdf Xpdfreader | 5.5 | Mar 25 | An issue was discovered in Xpdf 4.01.01 |
| CVE-2019-10018 | XP Xpdf Xpdfreader | 5.5 | Mar 25 | An issue was discovered in Xpdf 4.01.01 |
| CVE-2019-9878 | XP Xpdf Xpdfreader | 7.8 | Mar 19 | There is an invalid memory access in the function GfxIndexedColorSpace::mapColorToBase() located in GfxState.cc in Xpdf 4.0.0, as used in pdfalto 0.2 |
| CVE-2019-9877 | XP Xpdf Xpdfreader | 7.8 | Mar 19 | There is an invalid memory access vulnerability in the function TextPage::findGaps() located at TextOutputDev.c in Xpdf 4.01, which can (for example) be triggered by sending a… |
| CVE-2018-18651 | XP Xpdf Xpdfreader | 5.5 | Oct 25 | An issue was discovered in Xpdf 4.00 |
| CVE-2018-18650 | XP Xpdf Xpdfreader | 5.5 | Oct 25 | An issue was discovered in Xpdf 4.00 |
| CVE-2018-18459 | XP Xpdf Xpdfreader | 5.5 | Oct 18 | The function DCTStream::getBlock in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted pdf file, as demonstrated… |
| CVE-2018-18458 | XP Xpdf Xpdfreader | 5.5 | Oct 18 | The function DCTStream::decodeImage in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted pdf file, as… |
| CVE-2018-18457 | XP Xpdf Xpdfreader | 5.5 | Oct 18 | The function DCTStream::readScan in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted pdf file, as demonstrated… |
| CVE-2018-18456 | XP Xpdf Xpdfreader | 5.5 | Oct 18 | The function Object::isName() in Object.h (called from Gfx::opSetFillColorN) in Xpdf 4.00 allows remote attackers to cause a denial of service (stack-based buffer over-read) via a… |