CVE-2019-13288-POC

CVE-2019-13288 概念验证（PoC） xpdf/install/bin/pdftotext ./poc.pdf 在 Xpdf 4.01.01 中，Parser.cc 中的 Parser::getObj 函数可能通过特制文件导致无限递归。远程攻击者可利用此漏洞发起拒绝服务（DoS）攻击。这与 CVE-2018-16646 类似。...

CVE-2019-13288

CVE-2019-13288 – Xpdf 的 Parser::getObj 中的无限递归 概述 CVE-2019-13288 是在 Xpdf 4.01.01 版本中发现的漏洞，具体位于 Parser.cc 的 Parser::getObj 函数中。此缺陷在处理特制的 PDF 文件时可能导致 无限递归 ，进而引发 拒绝服务 DoS 条件。该漏洞类似于 CVE-2018-16646 ，凸显了在递归函数中进行稳健输入验证的重要性。 技术细节 CVE 编号 ：CVE-2019-13288 受影响软件 ：Xpdf 4.01.01 漏洞类型 ：不受控递归 CWE-674 影响 ：拒绝服务 DoS...

CVE-2019-13288

Xpdf version 4.02 2019-sep-25 The Xpdf software and documentation are copyright 1996-2019 Glyph & Cog, LLC. Email: [email protected] WWW: http://www.xpdfreader.com/ The PDF data structures, operators, and specification are documented in ISO 32000-2:2017. What is Xpdf? Xpdf is an open source...

CVE-2026-85458

A flaw was found in Xpdf. This vulnerability, a divide-by-zero error, occurs when the application processes a Type 3 font glyph that has a zero height. A local attacker could exploit this condition to trigger a crash, leading to a denial of service and making the application unavailable. Mitigati...

xpdf-docker

Xpdf Docker 镜像 此仓库包含 Xpdf 4.04 版本的 Docker 镜像，该版本存在漏洞 CVE-2022-30524。 构建镜像 📦 本仓库提供 3 种不同风格的镜像： bullseye/gcc ：Debian "bullseye"，使用 gcc 构建 bullseye/afl ：Debian "bullseye"，使用 afl-clang-fast++ 构建（调试模式） focal/afl ：Ubuntu 20.04 LTS Focal Fossa，使用 afl-clang-fast++ 构建（调试模式） 以下风格是指向其他风格的别名： bullseye →...

UBUNTU-CVE-2026-85458

Divide-by-zero in Xpdf 4.06 and earlier, when a glyph in a Type 3 font has a zero height...

CVE-2026-85458

Divide-by-zero in Xpdf 4.06 and earlier, when a glyph in a Type 3 font has a zero height...

CVE-2026-85458

Divide-by-zero in Xpdf 4.06 and earlier, when a glyph in a Type 3 font has a zero height...

CVE-2026-85458 Divide-by-zero in Xpdf 4.06 due to zero-height Type 3 glyph

Divide-by-zero in Xpdf 4.06 and earlier, when a glyph in a Type 3 font has a zero height...

CVE-2026-85458

CVE-2026-85458 is a divide-by-zero vulnerability in Xpdf 4.06 (and earlier) triggered when a Type 3 font contains a glyph with a zero height . The bug causes a low-availability impact, rated CVSS 4.0 base score 2.1 (LOW) with a local attack vector and high complexity. No exploitation or in-the-wi...

EUVD-2026-70735

Divide-by-zero in Xpdf 4.06 and earlier, when a glyph in a Type 3 font has a zero height...

CVE-2026-85458

Divide-by-zero in Xpdf 4.06 and earlier, when a glyph in a Type 3 font has a zero height...

SUSE CVE-2023-26930

Buffer Overflow vulnerability found in XPDF v.4.04 allows an attacker to cause a Denial of Service via the PDFDoc malloc in the pdftotext.cc function. NOTE: Vendor states “it's an expected abort on out-of-memory error.”...

Linux Distros Unpatched Vulnerability : CVE-2026-4407

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds array write in Xpdf 4.06 and earlier, due to incorrect validation of the N field in ICCBased color spaces. CVE-2026-4407 Note that Nessus relies o...

EUVD-2026-12995

Out-of-bounds array write in Xpdf 4.06 and earlier, due to incorrect validation of the "N" field in ICCBased color spaces...

CVE-2026-4407

Out-of-bounds array write in Xpdf 4.06 and earlier, due to incorrect validation of the "N" field in ICCBased color spaces...

CVE-2026-4407

Out-of-bounds array write in Xpdf 4.06 and earlier, due to incorrect validation of the "N" field in ICCBased color spaces...

UBUNTU-CVE-2026-4407

Out-of-bounds array write in Xpdf 4.06 and earlier, due to incorrect validation of the "N" field in ICCBased color spaces...

CVE-2026-4407 Out-of-bounds array write in Xpdf 4.06 due to missing validation

Out-of-bounds array write in Xpdf 4.06 and earlier, due to incorrect validation of the "N" field in ICCBased color spaces...

CVE-2026-4407 Out-of-bounds array write in Xpdf 4.06 due to missing validation

Out-of-bounds array write in Xpdf 4.06 and earlier, due to incorrect validation of the "N" field in ICCBased color spaces...