CVE-2018-18458

CVE-2018-18458 affects Xpdf 4.00: the DCTStream::decodeImage function in Stream.cc is vulnerable to a denial-of-service via a crafted PDF that triggers a NULL pointer dereference, as demonstrated by pdftoppm. Connected sources consistently describe the same flaw across multiple advisories (NVD en...

CVE-2018-7175

CV E-2018-7175 affects xpdf 4.00. A NULL pointer dereference in readCodestream handling JPX images with zero components can cause denial of service. Public references in connected docs indicate remediation: update to xpdf 4.01 (Fedora 29, Fedora/Thanks to Nessus entries). The vulnerability is tie...

CVE-2018-7452

CVE-2018-7452 affects xpdf 4.00, caused by a NULL pointer dereference in JPXStream::fillReadBuf (JPXStream.cc). This can be exploited to cause a denial of service by processing a crafted PDF file (demonstrated by pdftohtml). Remediation exists: Fedora/Fedora-related advisories indicate updating t...

CVE-2021-36493

CVE-2021-36493:ffects xpdf 4.03 pdfimages with a Buffer Overflow that crashes the app on a crafted command. Connected sources (PT-2023-12280, CNVD/CNNVD entries, OSV/Debian/NVD) confirm the component and version; no patch/version fix details are provided in the supplied documents.

CVE-2024-7867

CVE-2024-7867 affects Xpdf 4.05 and earlier, where extremely large coordinates in a page box can trigger an integer overflow and divide-by-zero. Fedora advisories indicate fixed packages with update to xpdf 4.06 (e.g., texlive-base/xpdf updates in Fedora 42/43 advisories), substituting vulnerable...

CVE-2022-33108

CVE-2022-33108 affects XPDF 4.04; the vulnerability is a stack overflow in Object::Copy (object.cc). Exploitation details are not described beyond this, but multiple advisories indicate updated packages are required (e.g., XPDF >= 4.05) to fix these issues. Connected sources corroborate the CV...

CVE-2024-2971

Xpdf vulnerability CVE-2024-2971 affects Xpdf 4.05 and earlier, caused by an out-of-bounds write in an array triggered by a negative object number in an indirect reference in the input PDF. Fedora advisories and security notes indicate update to 4.06 as the fix. If exploiting, the issue could imp...

CVE-2018-7454

CVE-2018-7454 affects xpdf 4.00, where a NULL pointer dereference in XFAForm::scanFields (XFAForm.cc) can cause denial of service when processing a crafted PDF (demonstrated by pdftohtml). Connected sources confirm the issue in xpdf 4.00 and downstream advisories note a fix parity with xpdf 4.01 ...

CVE-2018-7173

CVE-2018-7173 affects xpdf 4.00. A large loop in JBIG2Stream::readSymbolDictSeg can be exploited by a crafted PDF/file to trigger a denial of service. The description and connected sources consistently describe DoS via inappropriate decoding in JBIG2Stream::readSymbolDictSeg; no patch/version det...

CVE-2019-10022

CVE-2019-10022 affects Xpdf 4.01.01 and is caused by a NULL pointer dereference in Gfx::opSetExtGState (Gfx.cc). Multiple connected sources (SUSE, CNVD, UBUNTU, NVD, etc.) consistently describe the vulnerability as a NULL pointer dereference in that function. The issue is documented across severa...

CVE-2022-38928

Xpdf 4.04 is affected by CVE-2022-38928: a Null Pointer Dereference in FoFiType1C.cc:2393. The CVE entry shows a high-severity impact (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) with local access and user interaction required. Connected sources confirm this CVE within Xpdf 4.04 and note related advisor...

CVE-2023-2662

Affected software: Xpdf (version 4.04 and earlier). Vulnerability: a bad color space object in the input PDF can cause a divide-by-zero. This issue is documented across multiple sources referencing CVE-2023-2662 and is associated with an availability impact (per CVSS) of high. Impact: potential d...

CVE-2023-2664

CVE-2023-2664 affects Xpdf up to version 4.04, where a PDF object loop in the embedded file tree can cause infinite recursion and a stack overflow. multiple connected advisories confirm this vulnerability and consistently recommend upgrading to a fixed release (e.g., Xpdf >= 4.05). The issue i...

CVE-2023-26930

CVE-2023-26930 affects XPDF 4.04 and potentially earlier builds. The vulnerability is a buffer overflow in the PDF processing path (PDFDoc malloc in pdftotext.cc) that can cause a Denial of Service. Vendor notes it is an “expected abort on out-of-memory error.” Public advisories from SUSE/PTSecur...

CVE-2018-8105

The CVE-2018-8105 entry concerns xpdf 4.00, where the JPXStream::fillReadBuf function in JPXStream.cc can trigger a denial of service via a crafted PDF, caused by a heap-based buffer over-read that leads to application crash. The vulnerability is demonstrated by the pdftohtml tool. Connected sour...

CVE-2020-24996

CVE-2020-24996 affects Xpdf 4.0.2, with an invalid memory access in TextString::~TextString() in Catalog.cc. A crafted PDF sent to the pdftohtml binary can trigger a Denial of Service (segmentation fault) and potentially other impacts. Exploitation details, affected versions beyond 4.0.2, and rem...

CVE-2019-9878

CVE-2019-9878 affects Xpdf 4.0.0 (as used in pdfalto 0.2). The vulnerability is an invalid memory access in GfxIndexedColorSpace::mapColorToBase() in GfxState.cc, which can be triggered by sending a crafted PDF to the pdftops binary, leading to Denial of Service via a segmentation fault or potent...

CVE-2022-45586

CVE-2022-45586 affects Xpdf 4.04, with a stack overflow in Dict::find (xpdf/Dict.cc) that can enable a local attacker to cause a denial of service. The Gentoo/GSA advisory and Mageia advisory indicate fixes are available by upgrading to Xpdf >= 4.05, addressing the listed CVEs (including CVE-2...

CVE-2018-8103

The CVE-2018-8103 issue affects xpdf 4.00 (JBIG2Stream::readGenericBitmap in JBIG2Stream.cc). A crafted PDF can trigger a heap-based buffer over-read, leading to application crash (denial of service). The vulnerability is demonstrated by pdftohtml. No patch/firmware details are provided in the co...

CVE-2024-7868

CVE-2024-7868 affects Xpdf 4.05 and earlier, where invalid header info in a DCT (JPEG) stream can trigger an uninitialized variable in the DCT decoder, with a proof-of-concept PDF causing a segfault. Fedora/Slackware advisories indicate the issue is addressed by upgrading to Xpdf 4.06; multiple a...

CVE-2018-18459

CVE-2018-18459 affects Xpdf 4.00, where the function DCTStream::getBlock in Stream.cc can cause a denial of service via a crafted PDF file. The vulnerability is a NULL pointer dereference that is triggered by certain crafted inputs (as demonstrated by pdftoppm). Multiple connected records corrobo...

CVE-2022-38222

CVE-2022-38222 affects Xpdf 4.04, with a use-after-free in JBIG2Stream::close() (JBIG2Stream.cc). Triggered by sending a crafted PDF to pdfimages, it allows Denial of Service and possibly other impact. Public sources in the connected documents confirm the vulnerability and indicate fixes in later...

CVE-2023-2663

In Xpdf 4.04 and earlier, a PDF object loop can cause infinite recursion leading to a stack overflow. Multiple connected sources attribute the issue to a loop in page label trees (and, per Mageia, also in the embedded file tree). Affected product: Xpdf up to 4.04 (and earlier). Remediation: upgra...

CVE-2018-11033

The CVE-2018-11033 issue affects the DCT decoder in xpdf prior to 4.00, specifically the DCTStream::readHuffSym function in Stream.cc. The root cause is a vulnerability in the Huffman decoding path that allows remote attackers to cause a denial of service (application crash) or possibly other imp...

CVE-2018-18650

CVE-2018-18650 affects Xpdf 4.00: XRef::readXRefStream in XRef.cc is vulnerable to denial of service via a crafted /Size value in a PDF, causing an Integer Overflow when attempting a malloc for a large allocation. Impact is a DoS (availability). The available documents confirm the vulnerable func...

CVE-2010-0207

CVE-2010-0207 affects xpdf: the vulnerability arises in the xref table where an infinite loop can be triggered, allowing remote attackers to cause a denial of service (crash) in xpdf-based PDF viewers. The connected documents corroborate the root cause as an infinite loop in the xref table and th...

CVE-2018-18651

CVE-2018-18651 affects Xpdf 4.00: the code path catalog->getNumPages() in AcroForm.cc can hang due to a crafted PDF, caused by a large /Count value, enabling a denial-of-service condition (via pdftohtml). Documents consistently describe a denial-of-service scenario from large loop behavior but...

CVE-2018-8104

CVE-2018-8104 affects xpdf 4.00: BufStream::lookChar in Stream.cc is vulnerable to a heap-based over-read, enabling denial of service when processing a crafted PDF (as demonstrated by pdftohtml). Impact is a crash; the vulnerability arises from improper memory access in the BufStream component. S...

CVE-2010-0206

CVE-2010-0206 affects the xpdf project and relates to processing JBIG2 PDF stream objects, where a NULL pointer dereference can lead to a denial of service. The vulnerability is triggered while handling JBIG2 streams, potentially crashing the application and causing partial availability impact. T...

CVE-2018-7455

The vulnerability CVE-2018-7455 affects xpdf 4.00, where an out-of-bounds read in JPXStream::readTilePart (JPXStream.cc) can cause denial of service when processing a crafted PDF (as demonstrated by pdftohtml). The issue resides in the JPXStream implementation used for reading tile parts; input c...

CVE-2018-8106

The CVE-2018-8106 entry concerns xpdf 4.00, specifically the JPXStream::readTilePartData function in JPXStream.cc. The vulnerability permits a denial-of-service caused by a heap-based buffer over-read when processing certain PDF files, demonstrated via pdftohtml. The connected sources confirm the...

CVE-2018-18455

The vulnerability (CVE-2018-18455) affects Xpdf 4.00, specifically the GfxImageColorMap class in GfxState.cc. A crafted PDF file can trigger a heap-based buffer over-read, leading to denial of service (as demonstrated by pdftoppm). The description is corroborated across multiple connected sources...