Lucene search
+L

20 matches found

EUVD
EUVD
•added 2026/03/19 12:30 a.m.•21 views

EUVD-2026-12995

Out-of-bounds array write in Xpdf 4.06 and earlier, due to incorrect validation of the "N" field in ICCBased color spaces...

2.1CVSS5.8AI score0.00144EPSS
SaveExploits0References2
NVD
NVD
•added 2026/03/18 10:16 p.m.•14 views

CVE-2026-4407

Out-of-bounds array write in Xpdf 4.06 and earlier, due to incorrect validation of the "N" field in ICCBased color spaces...

2.1CVSS0.00144EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/03/18 10:16 p.m.•13 views

CVE-2026-4407

Out-of-bounds array write in Xpdf 4.06 and earlier, due to incorrect validation of the "N" field in ICCBased color spaces...

2.1CVSS5.9AI score0.00144EPSS
SaveExploits0References2
OSV
OSV
•added 2026/03/18 10:16 p.m.•24 views

UBUNTU-CVE-2026-4407

Out-of-bounds array write in Xpdf 4.06 and earlier, due to incorrect validation of the "N" field in ICCBased color spaces...

2.1CVSS5.8AI score0.00144EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/03/18 9:44 p.m.•41 views

CVE-2026-4407 Out-of-bounds array write in Xpdf 4.06 due to missing validation

Out-of-bounds array write in Xpdf 4.06 and earlier, due to incorrect validation of the "N" field in ICCBased color spaces...

2.1CVSS0.00144EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/03/18 9:44 p.m.•5 views

CVE-2026-4407 Out-of-bounds array write in Xpdf 4.06 due to missing validation

Out-of-bounds array write in Xpdf 4.06 and earlier, due to incorrect validation of the "N" field in ICCBased color spaces...

2.1CVSS5.9AI score0.00144EPSS
SaveExploits0References1
CVE
CVE
•added 2026/03/18 9:44 p.m.•43 views

CVE-2026-4407

The CVE-2026-4407 issue affects Xpdf 4.06 and earlier, caused by an out-of-bounds array write stemming from incorrect validation of the “N” field in ICCBased color spaces. The vulnerability is rooted in input validation for ICCBased color space handling, leading to potential memory access issues....

2.1CVSS5.9AI score0.00144EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/03/18 9:44 p.m.•9 views

CVE-2026-4407

Out-of-bounds array write in Xpdf 4.06 and earlier, due to incorrect validation of the "N" field in ICCBased color spaces...

2.1CVSS5.8AI score0.00144EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
•added 2026/03/18 9:44 p.m.•34 views

CVE-2026-4407

Out-of-bounds array write in Xpdf 4.06 and earlier, due to incorrect validation of the "N" field in ICCBased color spaces...

2.1CVSS5.9AI score0.00144EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/18 12:00 a.m.•1 views

CVE-2026-4407: Improper Input Validation

Out-of-bounds array write in Xpdf 4.06 and earlier, due to incorrect validation of the "N" field in ICCBased color spaces...

2.1CVSS5.8AI score0.00144EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/18 12:00 a.m.•17 views

PT-2026-26161

CVE-2026-4407 Out-of-bounds array write in Xpdf 4.06 and earlier, due to incorrect validation of the "N" field in ICCBased color spaces. https://t.co/6EPmHSJwhy...

2.1CVSS5.8AI score0.00144EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2020-27300

Malware in sbrugna...

8.8CVSS7.8AI score0.75498EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2025/02/05 2:43 p.m.•16 views

CVE-2020-6146

An exploitable code execution vulnerability exists in the rendering functionality of Nitro Pro 13.13.2.242 and 13.16.2.300. When drawing the contents of a page and selecting the stroke color from an 'ICCBased' colorspace, the application will read a length from the file and use it as a loop...

8.8CVSS7.3AI score0.75498EPSS
SaveExploits1References1
OSV
OSV
•added 2021/12/17 12:00 a.m.•18 views

OSV-2021-1704 Stack-buffer-overflow in pdfi_create_iccbased

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42460 Crash type: Stack-buffer-overflow WRITE 4 Crash state: pdficreateiccbased pdficreatecolorspacebyarray pdfisetcolorspace...

7.2AI score
SaveExploits0References1
NVD
NVD
•added 2020/09/16 7:15 p.m.•32 views

CVE-2020-6146

An exploitable code execution vulnerability exists in the rendering functionality of Nitro Pro 13.13.2.242 and 13.16.2.300. When drawing the contents of a page and selecting the stroke color from an 'ICCBased' colorspace, the application will read a length from the file and use it as a loop...

8.8CVSS0.75498EPSS
SaveExploits1References1
OSV
OSV
•added 2020/09/16 7:15 p.m.•11 views

CVE-2020-6146

An exploitable code execution vulnerability exists in the rendering functionality of Nitro Pro 13.13.2.242 and 13.16.2.300. When drawing the contents of a page and selecting the stroke color from an 'ICCBased' colorspace, the application will read a length from the file and use it as a loop...

8.8CVSS8AI score0.75498EPSS
SaveExploits1References1
Prion
Prion
•added 2020/09/16 7:15 p.m.•22 views

Heap overflow

An exploitable code execution vulnerability exists in the rendering functionality of Nitro Pro 13.13.2.242 and 13.16.2.300. When drawing the contents of a page and selecting the stroke color from an 'ICCBased' colorspace, the application will read a length from the file and use it as a loop...

6.8CVSS8.8AI score0.75498EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2020/09/16 6:48 p.m.•35 views

CVE-2020-6146

An exploitable code execution vulnerability exists in the rendering functionality of Nitro Pro 13.13.2.242 and 13.16.2.300. When drawing the contents of a page and selecting the stroke color from an 'ICCBased' colorspace, the application will read a length from the file and use it as a loop...

8.8CVSS8.8AI score0.75498EPSS
SaveExploits1References1
CVE
CVE
•added 2020/09/16 6:48 p.m.•80 views

CVE-2020-6146

Nitro Pro 13.13.2.242 and 13.16.2.300 contain a heap-based buffer overflow in ICCBased color space stroke rendering. During page drawing, the code reads a length from the file and uses it as a loop sentinel to write into a static 0x248-byte buffer, allowing an attacker to overflow the heap when t...

8.8CVSS8.7AI score0.75498EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/16 12:00 a.m.•5 views

CVE-2020-6146: Heap-based Buffer Overflow

An exploitable code execution vulnerability exists in the rendering functionality of Nitro Pro 13.13.2.242 and 13.16.2.300. When drawing the contents of a page and selecting the stroke color from an 'ICCBased' colorspace, the application will read a length from the file and use it as a loop...

8.8CVSS6.4AI score0.75498EPSS
SaveExploits1References3
Rows per page
Query Builder