3483 matches found
CVE-2019-13288-POC
CVE-2019-13288-POC xpdf/install/bin/pdftotext ./poc.pdf In Xpdf 4.01.01, the Parser::getObj function in Parser.cc may cause infinite recursion via a crafted file. A remote attacker can leverage this for a DoS attack. This is similar to CVE-2018-16646...
xpdf-docker
Xpdf Docker Images This repository contains docker images for Xpdf version 4.04, which is vulnerable to CVE-2022-30524. Building the Images 📦 This repository contains the image in 3 flavours: bullseye/gcc : Debian "bullseye", built with gcc bullseye/afl : Debian "bullseye", built with...
CVE-2019-13288
Xpdf version 4.02 2019-sep-25 The Xpdf software and documentation are copyright 1996-2019 Glyph & Cog, LLC. Email: [email protected] WWW: http://www.xpdfreader.com/ The PDF data structures, operators, and specification are documented in ISO 32000-2:2017. What is Xpdf? Xpdf is an open source...
CVE-2019-13288
CVE-2019-13288 – Infinite Recursion in Xpdf's Parser::getObj Overview CVE-2019-13288 is a vulnerability identified in Xpdf version 4.01.01 , specifically within the Parser::getObj function in Parser.cc. This flaw can lead to infinite recursion when processing a specially crafted PDF file, resulti...
CVE-2026-116671
A flaw was found in Xpdf. This vulnerability allows an attacker to cause a Denial of Service DoS by providing a specially crafted JPEG 2000 image. Due to improper validation of the progression order field, processing the file triggers an infinite loop that causes the application to hang...
CVE-2026-116671
Infinite loop in Xpdf 4.06 and earlier, due to incorrect validation of progression order field in JPEG 2000 image...
CVE-2026-116671
Infinite loop in Xpdf 4.06 and earlier, due to incorrect validation of progression order field in JPEG 2000 image...
UBUNTU-CVE-2026-116671
Infinite loop in Xpdf 4.06 and earlier, due to incorrect validation of progression order field in JPEG 2000 image...
CVE-2026-116671 Infinite loop in Xpdf due to missing validation in JPEG 2000 decoder
Infinite loop in Xpdf 4.06 and earlier, due to incorrect validation of progression order field in JPEG 2000 image...
EUVD-2026-110314
Infinite loop in Xpdf 4.06 and earlier, due to incorrect validation of progression order field in JPEG 2000 image...
CVE-2026-116671
The software Xpdf version 4.06 and earlier is susceptible to an infinite loop vulnerability. The root cause is identified as improper input validation (CWE-20, CWE-835) specifically regarding the progression order field in a JPEG 2000 decoder . The impact is characterized by a low base severity (...
PT-2026-125126
Infinite loop in Xpdf 4.06 and earlier, due to incorrect validation of progression order field in JPEG 2000 image...
CVE-2026-85458
A flaw was found in Xpdf. This vulnerability, a divide-by-zero error, occurs when the application processes a Type 3 font glyph that has a zero height. A local attacker could exploit this condition to trigger a crash, leading to a denial of service and making the application unavailable. Mitigati...
NewStart CGSL MAIN 7.02 : xpdf Multiple Vulnerabilities (NS-SA-2026-0109)
The remote NewStart CGSL host, running version MAIN 7.02, has xpdf packages installed that are affected by multiple vulnerabilities: - In Xpdf 4.05 and earlier, invalid header info in a DCT JPEG stream can lead to an uninitialized variable in the DCT decoder. The proof-of-concept PDF file causes ...
SUSE CVE-2026-85458
Divide-by-zero in Xpdf 4.06 and earlier, when a glyph in a Type 3 font has a zero height...
Linux Distros Unpatched Vulnerability : CVE-2026-85458
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Divide-by-zero in Xpdf 4.06 and earlier, when a glyph in a Type 3 font has a zero height. CVE-2026-85458 Note that Nessus relies on the presence of the package ...
CVE-2026-85458
Divide-by-zero in Xpdf 4.06 and earlier, when a glyph in a Type 3 font has a zero height...
CVE-2026-85458
Divide-by-zero in Xpdf 4.06 and earlier, when a glyph in a Type 3 font has a zero height...