Lucene search

K
nvd[email protected]NVD:CVE-2024-4141
HistoryApr 24, 2024 - 7:15 p.m.

CVE-2024-4141

2024-04-2419:15:47
CWE-787
web.nvd.nist.gov
out-of-bounds array write
xpdf
type 1 font
bounds check
modern compilers
cve-2024-4141

2.9 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

3.9 Low

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by an invalid character code in a Type 1 font. The root problem was a bounds check that was being optimized away by modern compilers.

2.9 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

3.9 Low

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%