Xpdf@* Security Vulnerabilities and Issues — Xpdf@* CVE List

Lucene search

XpdfreaderXpdf*

3 matches found

CVE•added 2021/08/24 7:15 p.m.•1276 views

CVE-2021-30860

An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.6.2. Processing a maliciously crafted PDF may lead to arbitrary code execution. Apple is aware of a report that this is...

7.8CVSS6.5AI score0.67361EPSS

In wild

CVE•added 2023/06/02 11:15 p.m.•60 views

CVE-2023-3044

An excessively large PDF page size (found in fuzz testing, unlikely in normal PDF files) can result in a divide-by-zero in Xpdf's text extraction code. This is related to CVE-2022-30524, but the problem here is caused by a very large page size, rather than by a very large character coordinate.

3.3CVSS5.2AI score0.02226EPSS

CVE•added 2024/08/15 9:15 p.m.•39 views

CVE-2024-7868

In Xpdf 4.05 (and earlier), invalid header info in a DCT (JPEG) stream can lead to an uninitialized variable in the DCT decoder. The proof-of-concept PDF file causes a segfault attempting to read from an invalid address.

8.2CVSS6.4AI score0.00034EPSS