CVE-2019-16115

CVE-2019-16115 affects poppler/xpdf 4.01.01, where a stack-based buffer under-read in IdentityFunction::transform (Function.cc) can be triggered by crafted PDFs (e.g., via pdftoppm). Impact per the primary record includes Denial of Service and possible unspecified effects, with CVSS scores: v2 ba...

CVE-2019-16088

CVE-2019-16088 affects Xpdf 3.04, with a SIGSEGV in XRef::fetch in XRef.cc after many recursive calls to Catalog::countPageTree in Catalog.cc. The connected Nessus and PTSecurity entries describe later Xpdf issues (not this CVE) and do not provide a patch or remediation for 3.04. Exploitation sta...

CVE-2019-12515

Xpdf 4.01.01 is affected by CVE-2019-12515 due to an out-of-bounds read in FlateStream::getChar() (Stream.cc). A crafted PDF could be processed by pdftoppm to trigger information disclosure or a denial of service. Remediation per available public advisories is to upgrade to Xpdf 4.02 (Fedora and ...

CVE-2019-13288

CVE-2019-13288 affects Xpdf 4.01.01: the Parser::getObj() function in Parser.cc may recurse infinitely when processing a crafted file, enabling a remote DoS. Connected Debian tracker confirms the same description. No explicit remediation or affected versions beyond the cited release are provided ...

CVE-2019-13283

CVE-2019-13283 affects Xpdf 4.01.01 and is a heap-based over-read in FoFiType1::parse (FoFiType1.cc) triggered by crafted PDFs; the source string length isn’t validated before a fixed-length strncpy copy, enabling potential Denial of Service or information leakage via crafted PDFs (pdftotext). Re...

CVE-2019-12360

CVE-2019-12360 affects Xpdf 4.01.01 via a stack-based buffer over-read in FoFiTrueType::dumpString (fofi/FoFiTrueType.cc). Triggered by crafted TrueType data in a PDF, it can cause Denial of Service or leak memory data into dump content when using the pdftops tool. Connected sources confirm the v...

CVE-2019-13286

CVE-2019-13286 affects Xpdf 4.01.01 where a heap-based buffer over-read in JBIG2Stream::readTextRegionSeg() (JBIG2Stream.cc) can trigger when processing crafted PDFs (e.g., via pdftoppm), potentially leading to information disclosure. The provided documents identify the vulnerable function and fi...

CVE-2019-12493

The CVE-2019-12493 case applies to Xpdf. A stack-based buffer over-read exists in PostScriptFunction::transform (Function.cc) of Xpdf 4.01.01, caused by mishandling in GfxSeparationColorSpace and GfxDeviceNColorSpace during tint transform functions. This can be triggered by a crafted PDF sent to ...

CVE-2019-13287

CVE-2019-13287 affects Xpdf 4.01.01 with an out-of-bounds read in SplashXPath::strokeAdjust() (splash/SplashXPath.cc). A crafted PDF delivered to pdftoppm can trigger the read, potentially leading to information disclosure. This is connected to CVE-2018-16368. Public documentation in the connecte...

CVE-2010-3704

CVE-2010-3704 affects the PDF parsing code (FoFiType1.parse) in xpdf (before 3.02pl5) and in Poppler up to 0.15.1, kdegraphics, and related products. The vulnerability stems from a PostScript Type 1 font handling path that uses a crafted font containing a negative array index, bypassing input val...

CVE-2019-13289

CVE-2019-13289 affects Xpdf 4.01.01, with a use-after-free vulnerability in JBIG2Stream::close() (JBIG2Stream.cc). Exploitation is demonstrated by crafting a PDF that can be processed by pdftoppm to trigger the flaw. Connected sources consistently describe the vulnerability as a memory misreferen...

CVE-2019-13291

CVE-2019-13291 : In Xpdf 4.01.01, there is a heap-based buffer over-read in DCTStream::readScan() (Stream.cc). Triggered by processing a crafted PDF document via the pdftops tool, it may lead to information disclosure. Connected entries corroborate the same description. No remediation details are...

CVE-2009-1180

CVE-2009-1180 affects the JBIG2 decoder path used by Xpdf (and components embedding Xpdf, e.g., Poppler-based renderers). The flaw is triggered by crafted PDFs and can lead to remote arbitrary code execution or crashes via a free of invalid data during JBIG2 decoding. Public advisories indicate a...

CVE-2009-0799

Technical details beyond the given Initial Description are not provided in the connected documents. Monitor for updates; the current set does not specify affected products/versions beyond general JBIG2 decoding issues (CVE-2009-0799) in Xpdf/kpdf/Poppler.

CVE-2009-1179

CVE-2009-1179 corresponds to an integer overflow in Xpdf’s JBIG2 decoder (and related JBIG2 code paths in Poppler) that affects Xpdf <= 3.02pl2 and older, CUPS <= 1.3.9 and older, and Poppler equals 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ...

CVE-2009-3608

CVE-2009-3608 is a heap-based buffer overflow in the ObjectStream::ObjectStream function (XRef.cc) affecting Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, used by GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX. A crafted PDF can trigger remote code execution. The connected Nessus/MiracleLin...

CVE-2019-13282

Technical details about CVE-2019-13282 are not publicly provided in the connected documents; the available materials mention the issue in Xpdf 4.01.01 but do not share affected components, exploit methods, or fixes.

CVE-2009-1182

CVE-2009-1182 concerns JBIG2 decoder flaws leading to remote code execution when processing crafted PDFs. The Initial Description lists multiple buffers overflows in the JBIG2 MMR decoder used by Xpdf (3.02pl2 and earlier), CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products. Connec...

CVE-2019-13281

CVE-2019-13281 affects Xpdf prior to the 4.02 release (e.g., 4.01.01) where a heap-based buffer overflow in DCTStream::decodeImage() writes to frameBuf during PDF decoding. The vulnerability can be triggered by a crafted PDF sent to pdftotext, enabling denial of service and information disclosure...

CVE-2009-3603

CVE-2009-3603 is an integer overflow in SplashBitmap::SplashBitmap in xpdf (and affected Poppler) that could allow remote code execution via a crafted PDF. Debian DSA-2028-1 and related advisories note multiple CVEs (including CVE-2009-3603, 3604, 3606, 3608, 3609) tied to xpdf/poppler components...

CVE-2009-0147

CVE-2009-0147 involves multiple integer overflows in the JBIG2 decoder used by Xpdf (3.02pl2 and earlier) and CUPS (1.3.9 and earlier), plus other products. The flaw affects the JBIG2 decoder paths JBIG2Stream::readSymbolDictSeg (and related symbol-dictionary handling) and JBIG2Stream::readGeneri...

CVE-2009-0166

The CVE-2009-0166 issue affects the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and related products, caused by a free of uninitialized memory in JBIG2 decoding. This leads to a remote denial of service (crash) via a crafted PDF file. Connected advisories ( MiracleLinux AXS...

CVE-2009-0800

CVE-2009-0800 involves input validation flaws in the JBIG2 decoder (Xpdf-based) used by Xpdf, Poppler, kdegraphics/kpdf and related components. Public records tie this to Poppler, kdegraphics kdepdf/kpdf in Debian/etch/lenny and CentOS/RHEL advisories, with multiple JBIG2/INT/UB memory issues ena...

CVE-2011-0764

CVE-2011-0764 affects t1lib 5.1.2 and earlier (used in Xpdf before 3.02pl6, teTeX, etc.). The vulnerability arises from an invalid pointer in conjunction with a dereference in Type 1 font processing, enabling remote code execution via a crafted PDF containing a Type 1 font. Public incident data i...

CVE-2009-1183

CVE-2009-1183 affects JBIG2 MMR decoding in Xpdf (3.02pl2 and earlier), and also broader products using JBIG2 decoders such as Poppler before 0.10.6 and other vendors (e.g., CUPS 1.3.9 and earlier). The issue is a remote DoS: a crafted PDF can cause an infinite loop or hang in the JBIG2 decoder, ...

CVE-2019-17064

The CVE-2019-17064 issue is a NULL pointer dereference in Catalog.cc of Xpdf 4.02 caused by late initialization of Catalog.pageLabels. Updates have been released (e.g., Fedora 2019-b890d4aad2; Mageia MGASA-2019-0422) to apply the upstream fix. Affected products are Xpdf 4.02; no exploitation deta...

CVE-2009-0146

CVE-2009-0146 is described in connected advisories as a set of vulnerabilities in the JBIG2 decoder used by Xpdf, CUPS (and related products) that allow remote attackers to cause a denial of service via crafted PDF files. The JBIG2-related flaws involve JBIG2SymbolDict::setBitmap and JBIG2Stream:...

CVE-2011-1553

The CVE-2011-1553 family concerns t1lib, embedded by TeX Live/teTeX and Xpdf, with multiple flaws: two heap-based AFM parsing buffer overflows (CVE-2010-2642, CVE-2011-0433), an invalid pointer dereference (CVE-2011-0764), a use-after-free (CVE-2011-1553), an off-by-one error (CVE-2011-1554), and...

CVE-2019-12958

CVE-2019-12958 affects Xpdf 4.01.01, where FoFiType1C::convertToType0 can over-read the heap when accessing the second element of privateDicts, because the array is only one element allocated. Fedora advisories show remediations by updating xpdf to 4.02 (FEDORA-2019-01da705767, FEDORA-2019-759ba8...

CVE-2009-3606

CVE-2009-3606 affects Xpdf (PSOutputDev::doImageL1Sep) and Poppler used in kdegraphics KPDF, where a crafted PDF can trigger a heap-based buffer overflow and allow remote code execution. Public references indicate the issue was addressed via updated Xpdf/Poppler packages across multiple distribut...

CVE-2011-1554

Mode C: The CVE-2011-1554 family arises from multiple t1lib flaws (AFM parser): two heap-based overflows, an invalid pointer dereference, a use-after-free, and an off-by-one memory read in Type 1 font handling. t1lib is embedded in TeX Live/tetex and in Xpdf-based workflows; affected products inc...

CVE-2009-0165

CVE-2009-0165: Integer overflow in the JBIG2 decoder of Xpdf (version 3.02pl2 and earlier) as used in Poppler and related products on Mac OS X. The description notes an unspecified impact and references the g*allocn issue, but does not provide concrete exploit details, affected products beyond Xp...

CVE-2022-24106

In Xpdf, prior to version 4.04, the DCT (JPEG) decoder allowed the 'interleaved' flag to be changed after the first scan, which creates an unknown integer-related vulnerability in Stream.cc. This issue is documented as CVE-2022-24106. Public advisories (e.g., Gentoo GLSA 202405-18 and Mageia MGAS...

CVE-2019-12957

In Xpdf 4.01.01, FoFiType1C::convertToType1 can trigger a buffer over-read when the index exceeds the charset array bounds. A crafted PDF can trigger this via the pdftops tool, potentially causing Denial of Service or information leakage. The provided documents specify the vulnerability class and...

CVE-2009-1181

CVE-2009-1181 affects the JBIG2 decoder in Xpdf 3.02pl2 and earlier, Poppler before 0.10.6, and related components, allowing remote attackers to crash the process via a crafted PDF that triggers a NULL pointer dereference. Connected sources confirm practical impacts across Poppler/kpdf/xpdf-famil...

CVE-2009-3609

CVE-2009-3609 affects Xpdf and Poppler components used in GPdf, kdegraphics KPDF, and CUPS pdftops. The flaw is an integer overflow in ImageStream::ImageStream (Stream.cc) in Xpdf ≤ 3.02pl4 and Poppler ≤ 0.12.1, which can be triggered by a crafted PDF document. Exploitation may lead to a NULL poi...

CVE-2009-0195

CVE-2009-0195 describes a heap-based buffer overflow in the JBIG2 decoder affecting Xpdf 3.02pl2 and earlier (and possibly other products, e.g., CUPS 1.3.9 ), allowing a remote attacker to execute arbitrary code via a crafted PDF containing JBIG2 symbol dictionary segments. The connected MiracleL...

CVE-2009-3604

CVE-2009-3604 affects Xpdf 2.x/3.x up to 3.02pl4 and Poppler 0.x, used in GPdf and kdegraphics KPDF. The root cause is improper memory allocation in Splash::drawImage, which may trigger a NULL pointer dereference or a heap-based buffer overflow when parsing crafted PDFs. Consequences include deni...

CVE-2022-24107

CVE-2022-24107 affects Xpdf prior to 4.04, where an integer overflow check is missing in JPXStream.cc. Multiple connected sources (Ubuntu USN; Mageia, Gentoo GLSA) reference this CVE alongside others for Xpdf versions prior to 4.04 and suggest upgrading to 4.04 as the resolution. The issue is des...

CVE-2011-1552

CVE-2011-1552 affects t1lib 5.1.2 and earlier (as used in Xpdf before 3.02pl6 and other products). It reads from invalid memory locations when processing a crafted Type 1 font in a PDF, enabling remote denial of service (application crash). Remediation: upgrade to Xpdf 3.02pl6 or later (and apply...

CVE-2019-9587

CVE-2019-9587 affects Xpdf 4.01, specifically the md5Round1() function in Decrypt.cc. A crafted PDF can trigger a stack consumption issue, potentially causing a denial of service via segmentation fault and possibly other impact related to Catalog::countPageTree. The description does not specify a...

CVE-2019-14288

CVE-2019-14288 affects Xpdf 4.01.01 with an integer overflow in JBIG2Bitmap::combine() inside JBIG2Stream.cc for the one-byte-per-line scenario. The connected documents corroborate the flaw in this component/version across various advisories (Debian, SUSE, osv, CNVD, CNVD mirrors, NVD/CVE listing...

CVE-2019-14292

CVE-2019-14292 affects Xpdf 4.01.01, with an out-of-bounds read in GfxPatchMeshShading::parse in GfxState.cc (typeA != 6, case 1). Exploitation could read beyond bounds, as documented in various advisories; fixes are referenced in later poppler/xpdf patch packages (e.g., SUSE-SU-2023:4362-1 and r...

CVE-2009-1144

Summary (CVE-2009-1144) : Untrusted search path in Gentoo's Xpdf package prior to 3.02-r2 allows local privilege escalation via a Trojan horse xpdfrc in the current working directory. The issue stems from a missing SYSTEM_XPDFRC macro during Gentoo builds that use the poppler library. The vulnera...

CVE-2019-14293

Xpdf 4.01.01 contains an out-of-bounds read in GfxPatchMeshShading::parse (GfxState.cc, typeA!=6 case 2). Several sources consolidate this as a vulnerability that can lead to denial of service. The connected documents confirm the affected component and root cause but do not provide any remediatio...

CVE-2019-14291

Xpdf 4.01.01 contains an out-of-bounds read in GfxPatchMeshShading::parse (GfxState.cc, typeA==6 case 3). The issue is documented across multiple sources (NVD, CNVD, Red Hat, Ubuntu OSV, CNVD, etc.). Potential impact is a denial of service. The provided documents do not specify a vendor patch or ...

CVE-2019-14289

CVE-2019-14289 affects Xpdf 4.01.01 with an integer overflow in JBIG2Bitmap::combine (JBIG2Stream.cc) for the "multiple bytes per line" case. Public details in connected sources describe the underlying issue and attribute potential denial of service (per CNVD entry). Exploitation status, affected...

CVE-2019-14290

CVE-2019-14290 affects Xpdf 4.01.01 via an out-of-bounds read in GfxPatchMeshShading::parse (GfxState.cc, typeA==6 case 2). Documented as a vulnerability in multiple feeds (CNVD-2019-26662, OSV/Ubuntu listings, SUSE, Debian, etc.) with potential denial of service. No explicit patch/version remedi...

CVE-2019-14294

CVE-2019-14294 affects Xpdf 4.01.01. The issue is a use-after-free in JPXStream::fillReadBuf (JPXStream.cc) caused by an out-of-bounds read. Public sources describe this as a vulnerability in Xpdf with references to memory misreference and potential denial of service; there are notes about unpatc...

CVE-2019-9589

CVE-2019-9589 is a NULL pointer dereference in Xpdf 4.01, specifically PSOutputDev::setupResources() in PSOutputDev.cc. It can be triggered by processing a crafted PDF file (e.g., via the pdftops binary), potentially causing a Denial of Service (segmentation fault) and possibly other impacts. The...