CVE-2019-14290

CVE-2019-14290 affects Xpdf 4.01.01 via an out-of-bounds read in GfxPatchMeshShading::parse (GfxState.cc, typeA==6 case 2). Documented as a vulnerability in multiple feeds (CNVD-2019-26662, OSV/Ubuntu listings, SUSE, Debian, etc.) with potential denial of service. No explicit patch/version remedi...

CVE-2019-14290

An issue was discovered in Xpdf 4.01.01. There is an out of bounds read in the function GfxPatchMeshShading::parse at GfxState.cc for typeA==6 case 2...

CVE-2019-14290

An issue was discovered in Xpdf 4.01.01. There is an out of bounds read in the function GfxPatchMeshShading::parse at GfxState.cc for typeA==6 case 2...

CVE-2019-14289

An issue was discovered in Xpdf 4.01.01. There is an integer overflow in the function JBIG2Bitmap::combine at JBIG2Stream.cc for the "multiple bytes per line" case...

CVE-2019-14289

CVE-2019-14289 affects Xpdf 4.01.01 with an integer overflow in JBIG2Bitmap::combine (JBIG2Stream.cc) for the "multiple bytes per line" case. Public details in connected sources describe the underlying issue and attribute potential denial of service (per CNVD entry). Exploitation status, affected...

CVE-2019-14289

An issue was discovered in Xpdf 4.01.01. There is an integer overflow in the function JBIG2Bitmap::combine at JBIG2Stream.cc for the "multiple bytes per line" case...

CVE-2019-14288

An issue was discovered in Xpdf 4.01.01. There is an Integer overflow in the function JBIG2Bitmap::combine at JBIG2Stream.cc for the "one byte per line" case...

CVE-2019-14288

An issue was discovered in Xpdf 4.01.01. There is an Integer overflow in the function JBIG2Bitmap::combine at JBIG2Stream.cc for the "one byte per line" case...

CVE-2019-14288

CVE-2019-14288 affects Xpdf 4.01.01 with an integer overflow in JBIG2Bitmap::combine() inside JBIG2Stream.cc for the one-byte-per-line scenario. The connected documents corroborate the flaw in this component/version across various advisories (Debian, SUSE, osv, CNVD, CNVD mirrors, NVD/CVE listing...

PT-2019-13589 · Xpdf +1 · Xpdf +1

Name of the Vulnerable Software and Affected Versions: Xpdf version 4.01.01 Description: An issue was discovered in the function GfxPatchMeshShading::parse at GfxState.cc for the case where typeA is not equal to 6, specifically case 1, which leads to an out of bounds read. Recommendations: For Xp...

Poppler Integer Overflow Vulnerability

Poppler is based on xpdf-3.0 code base PDF rendering library. An integer overflow vulnerability exists in Poppler 0.78.0 and earlier versions. The vulnerability stems from the JPXStream::init function not checking for negative values of the stream length. An attacker can exploit the vulnerability...

Xpdf Memory Misreference Vulnerability

Xpdf is a free PDF viewer and toolkit that includes a text extractor, image converter, HTML converter and more. A memory misreference vulnerability exists in the JBIG2Stream::close function in JBIG2Stream.cc in Xpdf 4.01.01. An attacker can exploit this vulnerability by sending a carefully crafte...

Xpdf heap buffer overflow vulnerability (CNVD-2019-21441)

Xpdf is an open source PDF reader from Foo Labs. The product supports decoding LZW compressed format files and read encrypted PDF files. A buffer overflow vulnerability exists in the 'DCTStream::decodeImage' function of the Stream.cc file in Xpdf version 4.01.01. The vulnerability stems from a...

Xpdf heap buffer overflow vulnerability (CNVD-2019-21457)

Xpdf is an open source PDF reader from Foo Labs. The product supports decoding LZW compressed format files and read encrypted PDF files. A buffer error vulnerability exists in Xpdf version 4.01.01. The vulnerability stems from a networked system or product that performs operations in memory witho...

Xpdf heap buffer overflow vulnerability (CNVD-2019-21456)

Xpdf is an open source PDF reader from Foo Labs. The product supports decoding LZW compressed format files and read encrypted PDF files. A buffer overflow vulnerability exists in the SampledFunction::transform of the Function.cc file in Xpdf version 4.01.01. The vulnerability originates when a...

Xpdf heap buffer overflow vulnerability (CNVD-2019-21459)

Xpdf is an open source PDF reader from Foo Labs. The product supports decoding LZW compressed format files and read encrypted PDF files. A buffer overflow vulnerability exists in the 'DCTStream::readScan' function of the Stream.cc file in Xpdf version 4.01.01. The vulnerability stems from a...

CVE-2019-13286

In Xpdf 4.01.01, there is a heap-based buffer over-read in the function JBIG2Stream::readTextRegionSeg located at JBIG2Stream.cc. It can, for example, be triggered by sending a crafted PDF document to the pdftoppm tool. It might allow an attacker to cause Information Disclosure...

CVE-2019-13286

In Xpdf 4.01.01, there is a heap-based buffer over-read in the function JBIG2Stream::readTextRegionSeg located at JBIG2Stream.cc. It can, for example, be triggered by sending a crafted PDF document to the pdftoppm tool. It might allow an attacker to cause Information Disclosure...

CVE-2019-13287

In Xpdf 4.01.01, there is an out-of-bounds read vulnerability in the function SplashXPath::strokeAdjust located at splash/SplashXPath.cc. It can, for example, be triggered by sending a crafted PDF document to the pdftoppm tool. It might allow an attacker to cause Information Disclosure. This is...

CVE-2019-13289

In Xpdf 4.01.01, there is a use-after-free vulnerability in the function JBIG2Stream::close located at JBIG2Stream.cc. It can, for example, be triggered by sending a crafted PDF document to the pdftoppm tool...