Xpdfreader / Xpdf
82 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2024-7868 | Uninitialized variable in Xpdf 4.05 due to invalid JPEG header | LOW | 2.1 | Aug 15, 2024 |
| CVE-2024-7867 | Integer overflow and divide-by-zero in Xpdf 4.05 due to bogus page box coordinates | LOW | 2.1 | Aug 15, 2024 |
| CVE-2024-7866 | Stack overflow in Xpdf 4.05 due to object loop in PDF pattern | LOW | 2.1 | Aug 15, 2024 |
| CVE-2024-4976 | Out-of-bounds array write in Xpdf 4.05 due to missing object type check | LOW | 2.1 | May 15, 2024 |
| CVE-2024-4568 | Stack overflow in Xpdf 4.05 due to object loop in PDF resources | MEDIUM | 5.5 | May 6, 2024 |
| CVE-2024-4141 | Out-of-bounds array write in Xpdf 4.05 due to incorrect bounds check | MEDIUM | 5.5 | Apr 24, 2024 |
| CVE-2024-3900 | Out-of-bounds stack array write in Xpdf 4.05 due to missing zero check | MEDIUM | 5.5 | Apr 17, 2024 |
| CVE-2024-3248 | Stack overflow in Xpdf 4.05 due to object loop in attachments | MEDIUM | 5.5 | Apr 2, 2024 |
| CVE-2024-3247 | Stack overflow in Xpdf 4.05 due to object loop in PDF object stream | MEDIUM | 5.5 | Apr 2, 2024 |
| CVE-2024-2971 | Out-of-bounds array access due to negative object numbers in indirect references in Xpdf 4.05 | MEDIUM | 5.5 | Mar 26, 2024 |
| CVE-2022-48545 | An infinite recursion in Catalog::findDestInTree can cause denial of service for xpdf 4.02. | MEDIUM | 5.5 | Aug 22, 2023 |
| CVE-2023-3436 | Deadlock in Xpdf 4.04 due to PDF object stream references | LOW | 3.3 | Jun 27, 2023 |
| CVE-2023-3044 | Divide-by-zero in Xpdf 4.04 due to very large page size | LOW | 3.3 | Jun 2, 2023 |
| CVE-2023-2664 | Stack overflow in Xpdf 4.04 due to object loop in PDF embedded file tree | MEDIUM | 5.5 | May 11, 2023 |
| CVE-2023-2663 | Stack overflow in Xpdf 4.04 due to object loop in PDF page label tree | CRITICAL | 9.1 | May 11, 2023 |
| CVE-2023-2662 | Divide-by-zero in Xpdf 4.04 due to bad color space object | MEDIUM | 5.5 | May 11, 2023 |
| CVE-2023-26930 | Buffer Overflow vulnerability found in XPDF v.4.04 allows an attacker to cause a Denial of Service via the PDFDoc malloc in the pdftotext.cc function. NOTE: Ve… | MEDIUM | 5.5 | Apr 26, 2023 |
| CVE-2022-45587 | Stack overflow vulnerability in function gmalloc in goo/gmem.cc in xpdf 4.04, allows local attackers to cause a denial of service. | MEDIUM | 5.5 | Feb 15, 2023 |
| CVE-2022-45586 | Stack overflow vulnerability in function Dict::find in xpdf/Dict.cc in xpdf 4.04, allows local attackers to cause a denial of service. | MEDIUM | 5.5 | Feb 15, 2023 |
| CVE-2021-36493 | Buffer Overflow vulnerability in pdfimages in xpdf 4.03 allows attackers to crash the application via crafted command. | HIGH | 7.5 | Feb 3, 2023 |
| CVE-2022-43071 | A stack overflow in the Catalog::readPageLabelTree2(Object*) function of XPDF v4.04 allows attackers to cause a Denial of Service (DoS) via a crafted PDF file. | MEDIUM | 5.5 | Nov 15, 2022 |
| CVE-2022-43295 | XPDF v4.04 was discovered to contain a stack overflow via the function FileStream::copy() at xpdf/Stream.cc:795. | MEDIUM | 5.5 | Nov 14, 2022 |
| CVE-2022-41842 | An issue was discovered in Xpdf 4.04. There is a crash in gfseek(_IO_FILE*, long, int) in goo/gfile.cc. | MEDIUM | 5.5 | Sep 30, 2022 |
| CVE-2022-41843 | An issue was discovered in Xpdf 4.04. There is a crash in convertToType0 in fofi/FoFiType1C.cc, a different vulnerability than CVE-2022-38928. | MEDIUM | 5.5 | Sep 30, 2022 |
| CVE-2022-41844 | An issue was discovered in Xpdf 4.04. There is a crash in XRef::fetch(int, int, Object*, int) in xpdf/XRef.cc, a different vulnerability than CVE-2018-16369 an… | MEDIUM | 5.5 | Sep 30, 2022 |
Showing 1 to 25 of 82 CVEs