Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:46361
HistoryApr 11, 2024 - 1:54 a.m.

Excessive Memory Allocation (Throttling)

2024-04-1101:54:17
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
vulnerability
xpdf
memory allocation
input validation
crafted input
pdf document
pdftoppm
binary
exploit

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.5%

xpdf is vulnerable to Excessive Memory Allocation(Throttling). The vulnerability is due to insufficient input validation, which allows crafted input to trigger excessive memory allocation. For example, sending a crafted PDF document to the pdftoppm binary can exploit this vulnerability, particularly when using the DCMAKE_CXX_COMPILER=afl-clang-fast++ option.

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.5%