CVE-2024-2971 - Out-of-bounds array access due to negative object numbers in indirect references in Xpdf 4.05

Back Back to CVE browser

MEDIUM

Out-of-bounds array access due to negative object numbers in indirect references in Xpdf 4.05

Published Mar 26, 2024

5.5

MEDIUM

CVSS 3.1

EPSS 0.18%

Description

Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by negative object number in indirect reference in the input PDF file.

Affected products

Vendor Xpdf Product Xpdf Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <=4.05

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Xpdf

unaffected

Version	Status	Constraints
0	affected	<=4.05

Product	Package	State	Advisory
Red Hat Enterprise Linux 10	xpdf	Not affected	n/a

Remediation

Red Hat statement

Red Hat rates this as a low impact vulnerability as this demands local access and this is usually a single user activity that may not impact the whole server.

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (6)

https://access.redhat.com/security/cve/CVE-2024-2971
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2271911
Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-27911
Advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-2971
https://www.cve.org/CVERecord?id=CVE-2024-2971
https://www.xpdfreader.com/security-bug/CVE-2024-2971.html
Vendor Advisory

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2024-2971		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2271911		Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-27911		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-2971
https://www.cve.org/CVERecord?id=CVE-2024-2971
https://www.xpdfreader.com/security-bug/CVE-2024-2971.html		Vendor Advisory