CVE-2019-13288

CVE-2019-13288 – Infinite Recursion in Xpdf's Parser::getObj Overview CVE-2019-13288 is a vulnerability identified in Xpdf version 4.01.01 , specifically within the Parser::getObj function in Parser.cc. This flaw can lead to infinite recursion when processing a specially crafted PDF file, resulti...

CVE-2019-13288

Xpdf version 4.02 2019-sep-25 The Xpdf software and documentation are copyright 1996-2019 Glyph & Cog, LLC. Email: [email protected] WWW: http://www.xpdfreader.com/ The PDF data structures, operators, and specification are documented in ISO 32000-2:2017. What is Xpdf? Xpdf is an open source...

CVE-2019-13288-POC

CVE-2019-13288-POC xpdf/install/bin/pdftotext ./poc.pdf In Xpdf 4.01.01, the Parser::getObj function in Parser.cc may cause infinite recursion via a crafted file. A remote attacker can leverage this for a DoS attack. This is similar to CVE-2018-16646...

xpdf-docker

Xpdf Docker Images This repository contains docker images for Xpdf version 4.04, which is vulnerable to CVE-2022-30524. Building the Images 📦 This repository contains the image in 3 flavours: bullseye/gcc : Debian "bullseye", built with gcc bullseye/afl : Debian "bullseye", built with...

CVE-2026-85458

A flaw was found in Xpdf. This vulnerability, a divide-by-zero error, occurs when the application processes a Type 3 font glyph that has a zero height. A local attacker could exploit this condition to trigger a crash, leading to a denial of service and making the application unavailable. Mitigati...

NewStart CGSL MAIN 7.02 : xpdf Multiple Vulnerabilities (NS-SA-2026-0109)

The remote NewStart CGSL host, running version MAIN 7.02, has xpdf packages installed that are affected by multiple vulnerabilities: - In Xpdf 4.05 and earlier, invalid header info in a DCT JPEG stream can lead to an uninitialized variable in the DCT decoder. The proof-of-concept PDF file causes ...

SUSE CVE-2026-85458

Divide-by-zero in Xpdf 4.06 and earlier, when a glyph in a Type 3 font has a zero height...

Linux Distros Unpatched Vulnerability : CVE-2026-85458

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Divide-by-zero in Xpdf 4.06 and earlier, when a glyph in a Type 3 font has a zero height. CVE-2026-85458 Note that Nessus relies on the presence of the package ...

CVE-2026-85458

Divide-by-zero in Xpdf 4.06 and earlier, when a glyph in a Type 3 font has a zero height...

CVE-2026-85458

Divide-by-zero in Xpdf 4.06 and earlier, when a glyph in a Type 3 font has a zero height...

UBUNTU-CVE-2026-85458

Divide-by-zero in Xpdf 4.06 and earlier, when a glyph in a Type 3 font has a zero height...

CVE-2026-85458 Divide-by-zero in Xpdf 4.06 due to zero-height Type 3 glyph

Divide-by-zero in Xpdf 4.06 and earlier, when a glyph in a Type 3 font has a zero height...

CVE-2026-85458

CVE-2026-85458 is a divide-by-zero vulnerability in Xpdf 4.06 (and earlier) triggered when a Type 3 font contains a glyph with a zero height . The bug causes a low-availability impact, rated CVSS 4.0 base score 2.1 (LOW) with a local attack vector and high complexity. No exploitation or in-the-wi...

EUVD-2026-70735

Divide-by-zero in Xpdf 4.06 and earlier, when a glyph in a Type 3 font has a zero height...

CVE-2026-85458 Divide-by-zero in Xpdf 4.06 due to zero-height Type 3 glyph

Divide-by-zero in Xpdf 4.06 and earlier, when a glyph in a Type 3 font has a zero height...

CVE-2026-85458

Divide-by-zero in Xpdf 4.06 and earlier, when a glyph in a Type 3 font has a zero height...

CVE-2026-85458: Divide By Zero

Divide-by-zero in Xpdf 4.06 and earlier, when a glyph in a Type 3 font has a zero height...

PT-2026-85254

Name of the Vulnerable Software and Affected Versions Xpdf versions prior to 4.07 Description A divide-by-zero error occurs when processing a Type 3 font containing a glyph with a height of zero. Recommendations Update to a version newer than 4.06...

SUSE CVE-2023-26930

Buffer Overflow vulnerability found in XPDF v.4.04 allows an attacker to cause a Denial of Service via the PDFDoc malloc in the pdftotext.cc function. NOTE: Vendor states "it's an expected abort on out-of-memory error."...

Linux Distros Unpatched Vulnerability : CVE-2026-4407

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds array write in Xpdf 4.06 and earlier, due to incorrect validation of the N field in ICCBased color spaces. CVE-2026-4407 Note that Nessus relies o...