Xpdfreader vulnerabilities, page 4
82 vulnerabilities
Known vulnerabilities in Xpdfreader products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.
CVE-2024-7867ubuntuipe+3
EPSS score0.21%
In Xpdf 4.05 (and earlier), very large coordinates in a page box can cause an integer overflow and divide-by-zero.CVE-2024-7866ubuntuipe+3EPSS score0.22%
In Xpdf 4.05 (and earlier), a PDF object loop in a pattern resource leads to infinite recursion and a stack overflow.CVE-2024-3248ubuntuipe+3EPSS score0.29%
In Xpdf 4.05 (and earlier), a PDF object loop in the attachments leads to infinite recursion and a stack overflow.CVE-2024-3900ubuntuipe+2EPSS score0.18%
Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by long Unicode sequence in ActualText.CVE-2024-3247ubuntuipe+3EPSS score0.29%
In Xpdf 4.05 (and earlier), a PDF object loop in an object stream leads to infinite recursion and a stack overflow.CVE-2019-9877ubuntupoppler+1EPSS score1.14%
There is an invalid memory access vulnerability in the function TextPage::findGaps() located at TextOutputDev.c in Xpdf 4.01, which can (for example) be triggered by sending a crafted pdf file to the pdftops binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact.CVE-2019-9878ubuntupoppler+2EPSS score1.20%
There is an invalid memory access in the function GfxIndexedColorSpace::mapColorToBase() located in GfxState.cc in Xpdf 4.0.0, as used in pdfalto 0.2. It can be triggered by (for example) sending a crafted pdf file to the pdftops binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact.CVE-2019-10022ubuntupoppler+1EPSS score0.88%
An issue was discovered in Xpdf 4.01.01. There is a NULL pointer dereference in the function Gfx::opSetExtGState in Gfx.cc.CVE-2019-10020ubuntupoppler+1EPSS score0.87%
An issue was discovered in Xpdf 4.01.01. There is an FPE in the function Splash::scaleImageYuXu at Splash.cc for x Bresenham parameters.CVE-2019-10018canonicalubuntu_linux+4EPSS score1.10%
An issue was discovered in Xpdf 4.01.01. There is an FPE in the function PostScriptFunction::exec at Function.cc for the psOpIdiv case.CVE-2019-10026ubuntupoppler+1EPSS score0.87%
An issue was discovered in Xpdf 4.01.01. There is an FPE in the function PostScriptFunction::exec in Function.cc for the psOpRoll case.CVE-2019-10019ubuntupoppler+1EPSS score0.90%
An issue was discovered in Xpdf 4.01.01. There is an FPE in the function PSOutputDev::checkPageSlice at PSOutputDev.cc for nStripes.CVE-2019-10025ubuntupoppler+1EPSS score0.87%
An issue was discovered in Xpdf 4.01.01. There is an FPE in the function ImageStream::ImageStream at Stream.cc for nBits.CVE-2019-10021ubuntupoppler+1EPSS score0.90%
An issue was discovered in Xpdf 4.01.01. There is an FPE in the function ImageStream::ImageStream at Stream.cc for nComps.CVE-2019-10023ubuntupoppler+1EPSS score0.90%
An issue was discovered in Xpdf 4.01.01. There is an FPE in the function PostScriptFunction::exec at Function.cc for the psOpMod case.CVE-2019-10024ubuntupoppler+1EPSS score0.87%
An issue was discovered in Xpdf 4.01.01. There is an FPE in the function Splash::scaleImageYuXu at Splash.cc for y Bresenham parameters.CVE-2023-2662ubuntuipe+3EPSS score0.28%
In Xpdf 4.04 (and earlier), a bad color space object in the input PDF file can cause a divide-by-zero.CVE-2023-2664ubuntuipe+3EPSS score0.30%
In Xpdf 4.04 (and earlier), a PDF object loop in the embedded file tree leads to infinite recursion and a stack overflow.CVE-2023-2663ubuntuipe+3EPSS score0.48%
In Xpdf 4.04 (and earlier), a PDF object loop in the page label tree leads to infinite recursion and a stack overflow.CVE-2023-26930xpdfreaderxpdfEPSS score0.34%
Buffer Overflow vulnerability found in XPDF v.4.04 allows an attacker to cause a Denial of Service via the PDFDoc malloc in the pdftotext.cc function. NOTE: Vendor states “it's an expected abort on out-of-memory error.”