Xpdfreader vulnerabilities, page 3
82 vulnerabilities
Known vulnerabilities in Xpdfreader products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.
CVE-2022-43071ubuntuipe+1
EPSS score0.34%
A stack overflow in the Catalog::readPageLabelTree2(Object*) function of XPDF v4.04 allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.CVE-2022-27135ubuntuipe+1EPSS score1.03%
xpdf 4.03 has heap buffer overflow in the function readXRefTable located in XRef.cc. An attacker can exploit this bug to cause a Denial of Service (Segmentation fault) or other unspecified effects by sending a crafted PDF file to the pdftoppm binary.CVE-2022-38222ubuntuipe+1EPSS score0.47%
There is a use-after-free issue in JBIG2Stream::close() located in JBIG2Stream.cc in Xpdf 4.04. It can be triggered by sending a crafted PDF file to (for example) the pdfimages binary. It allows an attacker to cause Denial of Service or possibly have unspecified other impact.CVE-2022-38171ubuntuipe+4EPSS score0.34%
Xpdf prior to version 4.04 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIG2Stream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2021-30860 (Apple CoreGraphics).CVE-2022-38928ubuntuipe+1EPSS score0.43%
XPDF 4.04 is vulnerable to Null Pointer Dereference in FoFiType1C.cc:2393.CVE-2022-38334ubuntuipe+1EPSS score0.41%
XPDF v4.04 and earlier was discovered to contain a stack overflow via the function Catalog::countPageTree() at Catalog.cc.CVE-2022-45586ubuntuipe+1EPSS score0.32%
Stack overflow vulnerability in function Dict::find in xpdf/Dict.cc in xpdf 4.04, allows local attackers to cause a denial of service.CVE-2022-45587ubuntuipe+1EPSS score0.32%
Stack overflow vulnerability in function gmalloc in goo/gmem.cc in xpdf 4.04, allows local attackers to cause a denial of service.CVE-2022-30775ubuntuipe+1EPSS score0.84%
xpdf 4.04 allocates excessive memory when presented with crafted input. This can be triggered by (for example) sending a crafted PDF document to the pdftoppm binary. It is most easily reproduced with the DCMAKE_CXX_COMPILER=afl-clang-fast++ option.CVE-2022-30524ubuntuipe+1EPSS score1.63%
There is an invalid memory access in the TextLine class in TextOutputDev.cc in Xpdf 4.0.4 because the text extractor mishandles characters at large y coordinates. It can be triggered by (for example) sending a crafted pdf file to the pdftotext binary, which allows a remote attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.CVE-2022-33108ubuntuipe+1EPSS score1.15%
XPDF v4.04 was discovered to contain a stack overflow vulnerability via the Object::Copy class of object.cc files.CVE-2012-2142debianpoppler+7EPSS score2.94%
The error function in Error.cc in poppler before 0.21.4 allows remote attackers to execute arbitrary commands via a PDF containing an escape sequence for a terminal emulator.CVE-2010-0206debianpoppler+3EPSS score1.06%
xpdf allows remote attackers to cause a denial of service (NULL pointer dereference and crash) in the way it processes JBIG2 PDF stream objects.CVE-2010-0207debianpoppler+3EPSS score0.85%
In xpdf, the xref table contains an infinite loop which allows remote attackers to cause a denial of service (application crash) in xpdf-based PDF viewers.CVE-2010-3702applecups+19EPSS score2.76%
The Gfx::getPos function in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, CUPS, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) via unknown vectors that trigger an uninitialized pointer dereference.CVE-2024-2971ubuntuipe+3EPSS score0.18%
Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by negative object number in indirect reference in the input PDF file.CVE-2024-4141ubuntuipe+18EPSS score0.18%
Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by an invalid character code in a Type 1 font. The root problem was a bounds check that was being optimized away by modern compilers.CVE-2024-4976ubuntuipe+3EPSS score0.17%
Out-of-bounds array write in Xpdf 4.05 and earlier, due to missing object type check in AcroForm field reference.CVE-2024-4568ubuntuipe+3EPSS score0.22%
In Xpdf 4.05 (and earlier), a PDF object loop in the PDF resources leads to infinite recursion and a stack overflow.CVE-2024-7868ubuntuipe+3EPSS score0.39%
In Xpdf 4.05 (and earlier), invalid header info in a DCT (JPEG) stream can lead to an uninitialized variable in the DCT decoder. The proof-of-concept PDF file causes a segfault attempting to read from an invalid address.