Browse CVEs

MEDIUM 5.5 CVE-2022-48545 An infinite recursion in Catalog::findDestInTree can cause denial of service for xpdf 4.02. Xpdf Mitigation only Fix from $1,6002023-08-22 MEDIUM 5.5 CVE-2023-26930 Buffer Overflow vulnerability found in XPDF v.4.04 allows an attacker to cause a Denial of Service via the PDFDoc malloc in the pdftotext.cc function… Xpdf No fix yet Fix from $1,6002023-04-26 MEDIUM 5.5 CVE-2022-45586 Stack overflow vulnerability in function Dict::find in xpdf/Dict.cc in xpdf 4.04, allows local attackers to cause a denial of service. Xpdf No fix yet Fix from $1,6002023-02-15 MEDIUM 5.5 CVE-2022-45587 Stack overflow vulnerability in function gmalloc in goo/gmem.cc in xpdf 4.04, allows local attackers to cause a denial of service. Xpdf No fix yet Fix from $1,6002023-02-15 HIGH 7.5 CVE-2021-36493 Buffer Overflow vulnerability in pdfimages in xpdf 4.03 allows attackers to crash the application via crafted command. Xpdf No fix yet Fix from $1,9502023-02-03 MEDIUM 5.5 CVE-2022-43071 A stack overflow in the Catalog::readPageLabelTree2(Object*) function of XPDF v4.04 allows attackers to cause a Denial of Service (DoS) via a crafted… Xpdf No fix yet Fix from $1,6002022-11-15 MEDIUM 5.5 CVE-2022-43295 XPDF v4.04 was discovered to contain a stack overflow via the function FileStream::copy() at xpdf/Stream.cc:795. Xpdf Mitigation only Fix from $1,6002022-11-14 MEDIUM 5.5 CVE-2022-41843 An issue was discovered in Xpdf 4.04. There is a crash in convertToType0 in fofi/FoFiType1C.cc, a different vulnerability than CVE-2022-38928. Xpdf No fix yet Fix from $1,6002022-09-30 HIGH 7.8 CVE-2022-38222 There is a use-after-free issue in JBIG2Stream::close() located in JBIG2Stream.cc in Xpdf 4.04. It can be triggered by sending a crafted PDF file to … Xpdf No fix yet Fix from $1,9502022-09-29 HIGH 7.8 CVE-2022-38928 XPDF 4.04 is vulnerable to Null Pointer Dereference in FoFiType1C.cc:2393. Xpdf No fix yet Fix from $1,9502022-09-21 MEDIUM 5.5 CVE-2022-36561 XPDF v4.0.4 was discovered to contain a segmentation violation via the component /xpdf/AcroForm.cc:538. Xpdf No fix yet Fix from $1,6002022-08-30 HIGH 7.8 CVE-2022-33108 XPDF v4.04 was discovered to contain a stack overflow vulnerability via the Object::Copy class of object.cc files. Xpdf No fix yet Fix from $1,9502022-06-28 MEDIUM 5.5 CVE-2021-27548 There is a Null Pointer Dereference vulnerability in the XFAScanner::scanNode() function in XFAScanner.cc in xpdf 4.03. Xpdf No fix yet Fix from $1,6002022-05-18 MEDIUM 5.5 CVE-2022-30775 xpdf 4.04 allocates excessive memory when presented with crafted input. This can be triggered by (for example) sending a crafted PDF document to the … Xpdf No fix yet Fix from $1,6002022-05-16 HIGH 7.8 CVE-2022-30524 There is an invalid memory access in the TextLine class in TextOutputDev.cc in Xpdf 4.0.4 because the text extractor mishandles characters at large y… Xpdf No fix yet Fix from $1,9502022-05-09 MEDIUM 5.5 CVE-2022-27135 xpdf 4.03 has heap buffer overflow in the function readXRefTable located in XRef.cc. An attacker can exploit this bug to cause a Denial of Service (S… Xpdf No fix yet Fix from $1,6002022-04-25 HIGH 7.8 CVE-2020-24996 There is an invalid memory access in the function TextString::~TextString() located in Catalog.cc in Xpdf 4.0.2. It can be triggered by (for example)… Xpdf No fix yet Fix from $1,9502020-09-03 HIGH 7.8 CVE-2020-24999 There is an invalid memory access in the function fprintf located in Error.cc in Xpdf 4.0.2. It can be triggered by sending a crafted PDF file to the… Xpdf No fix yet Fix from $1,9502020-09-03 MEDIUM 5.5 CVE-2010-0206 xpdf allows remote attackers to cause a denial of service (NULL pointer dereference and crash) in the way it processes JBIG2 PDF stream objects. Xpdf Mitigation only Fix from $1,6002019-10-30 MEDIUM 5.5 CVE-2010-0207 In xpdf, the xref table contains an infinite loop which allows remote attackers to cause a denial of service (application crash) in xpdf-based PDF vi… Xpdf Mitigation only Fix from $1,6002019-10-30 MEDIUM 5.5 CVE-2019-10019 An issue was discovered in Xpdf 4.01.01. There is an FPE in the function PSOutputDev::checkPageSlice at PSOutputDev.cc for nStripes. Xpdf No fix yet Fix from $1,6002019-03-25 MEDIUM 5.5 CVE-2019-10020 An issue was discovered in Xpdf 4.01.01. There is an FPE in the function Splash::scaleImageYuXu at Splash.cc for x Bresenham parameters. Xpdf No fix yet Fix from $1,6002019-03-25 MEDIUM 5.5 CVE-2019-10021 An issue was discovered in Xpdf 4.01.01. There is an FPE in the function ImageStream::ImageStream at Stream.cc for nComps. Xpdf No fix yet Fix from $1,6002019-03-25 MEDIUM 5.5 CVE-2019-10022 An issue was discovered in Xpdf 4.01.01. There is a NULL pointer dereference in the function Gfx::opSetExtGState in Gfx.cc. Xpdf No fix yet Fix from $1,6002019-03-25 MEDIUM 5.5 CVE-2019-10023 An issue was discovered in Xpdf 4.01.01. There is an FPE in the function PostScriptFunction::exec at Function.cc for the psOpMod case. Xpdf No fix yet Fix from $1,6002019-03-25 MEDIUM 5.5 CVE-2019-10024 An issue was discovered in Xpdf 4.01.01. There is an FPE in the function Splash::scaleImageYuXu at Splash.cc for y Bresenham parameters. Xpdf No fix yet Fix from $1,6002019-03-25 MEDIUM 5.5 CVE-2019-10025 An issue was discovered in Xpdf 4.01.01. There is an FPE in the function ImageStream::ImageStream at Stream.cc for nBits. Xpdf No fix yet Fix from $1,6002019-03-25 MEDIUM 5.5 CVE-2019-10026 An issue was discovered in Xpdf 4.01.01. There is an FPE in the function PostScriptFunction::exec in Function.cc for the psOpRoll case. Xpdf No fix yet Fix from $1,6002019-03-25 HIGH 7.8 CVE-2019-9877 There is an invalid memory access vulnerability in the function TextPage::findGaps() located at TextOutputDev.c in Xpdf 4.01, which can (for example)… Xpdf No fix yet Fix from $1,9502019-03-21 MEDIUM 5.5 CVE-2018-18650 An issue was discovered in Xpdf 4.00. XRef::readXRefStream in XRef.cc allows attackers to launch a denial of service (Integer Overflow) via a crafted… Xpdf No fix yet Fix from $1,6002018-10-25