CVE Browser

Uninitialized variable in Xpdf 4.05 due to invalid JPEG header

Integer overflow and divide-by-zero in Xpdf 4.05 due to bogus page box coordinates

Stack overflow in Xpdf 4.05 due to object loop in PDF pattern

Out-of-bounds array write in Xpdf 4.05 due to missing object type check

Stack overflow in Xpdf 4.05 due to object loop in PDF resources

Out-of-bounds array write in Xpdf 4.05 due to incorrect bounds check

Out-of-bounds stack array write in Xpdf 4.05 due to missing zero check

Stack overflow in Xpdf 4.05 due to object loop in attachments

Stack overflow in Xpdf 4.05 due to object loop in PDF object stream

Out-of-bounds array access due to negative object numbers in indirect references in Xpdf 4.05

An infinite recursion in Catalog::findDestInTree can cause denial of service for xpdf 4.02.

Deadlock in Xpdf 4.04 due to PDF object stream references

Divide-by-zero in Xpdf 4.04 due to very large page size

Stack overflow in Xpdf 4.04 due to object loop in PDF embedded file tree

Stack overflow in Xpdf 4.04 due to object loop in PDF page label tree

Divide-by-zero in Xpdf 4.04 due to bad color space object

Buffer Overflow vulnerability found in XPDF v.4.04 allows an attacker to cause a Denial of Service via the PDFDoc malloc in the pdftotext.cc function. NOTE: Ve…

Stack overflow vulnerability in function gmalloc in goo/gmem.cc in xpdf 4.04, allows local attackers to cause a denial of service.

Stack overflow vulnerability in function Dict::find in xpdf/Dict.cc in xpdf 4.04, allows local attackers to cause a denial of service.

Buffer Overflow vulnerability in pdfimages in xpdf 4.03 allows attackers to crash the application via crafted command.

A stack overflow in the Catalog::readPageLabelTree2(Object*) function of XPDF v4.04 allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.

XPDF v4.04 was discovered to contain a stack overflow via the function FileStream::copy() at xpdf/Stream.cc:795.

An issue was discovered in Xpdf 4.04. There is a crash in gfseek(_IO_FILE*, long, int) in goo/gfile.cc.

An issue was discovered in Xpdf 4.04. There is a crash in convertToType0 in fofi/FoFiType1C.cc, a different vulnerability than CVE-2022-38928.

An issue was discovered in Xpdf 4.04. There is a crash in XRef::fetch(int, int, Object*, int) in xpdf/XRef.cc, a different vulnerability than CVE-2018-16369 an…