Lucene search
K

18 matches found

EUVD
EUVD
added 2026/03/19 12:30 a.m.4 views

EUVD-2026-12995

Out-of-bounds array write in Xpdf 4.06 and earlier, due to incorrect validation of the "N" field in ICCBased color spaces...

2.1CVSS5.8AI score0.00013EPSS
Exploits0References2
NVD
NVD
added 2026/03/18 10:16 p.m.2 views

CVE-2026-4407

Out-of-bounds array write in Xpdf 4.06 and earlier, due to incorrect validation of the "N" field in ICCBased color spaces...

2.1CVSS0.00013EPSS
Exploits0References1
OSV
OSV
added 2026/03/18 10:16 p.m.1 views

UBUNTU-CVE-2026-4407

Out-of-bounds array write in Xpdf 4.06 and earlier, due to incorrect validation of the "N" field in ICCBased color spaces...

2.1CVSS5.8AI score0.00013EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2026/03/18 10:16 p.m.0 views

CVE-2026-4407

Out-of-bounds array write in Xpdf 4.06 and earlier, due to incorrect validation of the "N" field in ICCBased color spaces...

2.1CVSS5.9AI score0.00013EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/03/18 9:44 p.m.19 views

CVE-2026-4407 Out-of-bounds array write in Xpdf 4.06 due to missing validation

Out-of-bounds array write in Xpdf 4.06 and earlier, due to incorrect validation of the "N" field in ICCBased color spaces...

2.1CVSS0.00013EPSS
Exploits0References1
CVE
CVE
added 2026/03/18 9:44 p.m.8 views

CVE-2026-4407

The CVE-2026-4407 issue affects Xpdf 4.06 and earlier, caused by an out-of-bounds array write stemming from incorrect validation of the “N” field in ICCBased color spaces. The vulnerability is rooted in input validation for ICCBased color space handling, leading to potential memory access issues....

2.1CVSS5.8AI score0.00013EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/18 9:44 p.m.2 views

CVE-2026-4407

Out-of-bounds array write in Xpdf 4.06 and earlier, due to incorrect validation of the "N" field in ICCBased color spaces...

2.1CVSS5.8AI score0.00013EPSS
Exploits0References2Affected Software1
Debian CVE
Debian CVE
added 2026/03/18 9:44 p.m.2 views

CVE-2026-4407

Out-of-bounds array write in Xpdf 4.06 and earlier, due to incorrect validation of the "N" field in ICCBased color spaces...

2.1CVSS5.3AI score0.00013EPSS
Exploits0
Vulnrichment
Vulnrichment
added 2026/03/18 9:44 p.m.0 views

CVE-2026-4407 Out-of-bounds array write in Xpdf 4.06 due to missing validation

Out-of-bounds array write in Xpdf 4.06 and earlier, due to incorrect validation of the "N" field in ICCBased color spaces...

2.1CVSS5.8AI score0.00013EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/03/18 12:0 a.m.2 views

PT-2026-26161

CVE-2026-4407 Out-of-bounds array write in Xpdf 4.06 and earlier, due to incorrect validation of the "N" field in ICCBased color spaces. https://t.co/6EPmHSJwhy...

2.1CVSS5.8AI score0.00013EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2020-27300

Malware in sbrugna...

8.8CVSS8.8AI score0.00503EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/02/05 2:43 p.m.5 views

CVE-2020-6146

An exploitable code execution vulnerability exists in the rendering functionality of Nitro Pro 13.13.2.242 and 13.16.2.300. When drawing the contents of a page and selecting the stroke color from an 'ICCBased' colorspace, the application will read a length from the file and use it as a loop...

8.8CVSS7.3AI score0.00503EPSS
Exploits1References1
OSV
OSV
added 2021/12/17 12:0 a.m.8 views

OSV-2021-1704 Stack-buffer-overflow in pdfi_create_iccbased

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42460 Crash type: Stack-buffer-overflow WRITE 4 Crash state: pdficreateiccbased pdficreatecolorspacebyarray pdfisetcolorspace...

7.2AI score
Exploits0References1
NVD
NVD
added 2020/09/16 7:15 p.m.8 views

CVE-2020-6146

An exploitable code execution vulnerability exists in the rendering functionality of Nitro Pro 13.13.2.242 and 13.16.2.300. When drawing the contents of a page and selecting the stroke color from an 'ICCBased' colorspace, the application will read a length from the file and use it as a loop...

8.8CVSS0.00503EPSS
Exploits1References1
OSV
OSV
added 2020/09/16 7:15 p.m.0 views

CVE-2020-6146

An exploitable code execution vulnerability exists in the rendering functionality of Nitro Pro 13.13.2.242 and 13.16.2.300. When drawing the contents of a page and selecting the stroke color from an 'ICCBased' colorspace, the application will read a length from the file and use it as a loop...

8.8CVSS8AI score
Exploits0References1
Prion
Prion
added 2020/09/16 7:15 p.m.10 views

Heap overflow

An exploitable code execution vulnerability exists in the rendering functionality of Nitro Pro 13.13.2.242 and 13.16.2.300. When drawing the contents of a page and selecting the stroke color from an 'ICCBased' colorspace, the application will read a length from the file and use it as a loop...

6.8CVSS8.8AI score0.00503EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2020/09/16 6:48 p.m.11 views

CVE-2020-6146

An exploitable code execution vulnerability exists in the rendering functionality of Nitro Pro 13.13.2.242 and 13.16.2.300. When drawing the contents of a page and selecting the stroke color from an 'ICCBased' colorspace, the application will read a length from the file and use it as a loop...

8.8CVSS8.8AI score0.00503EPSS
Exploits1References1
CVE
CVE
added 2020/09/16 6:48 p.m.58 views

CVE-2020-6146

Nitro Pro 13.13.2.242 and 13.16.2.300 contain a heap-based buffer overflow in ICCBased color space stroke rendering. During page drawing, the code reads a length from the file and uses it as a loop sentinel to write into a static 0x248-byte buffer, allowing an attacker to overflow the heap when t...

8.8CVSS8.7AI score0.00503EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder