Integer overflow in Xpdf

CVE-2025-2574

Out-of-bounds array write in Xpdf 4.05 and earlier, due to incorrect integer overflow checking in the PostScript function interpreter code.

Vulnerability class: Integer Overflow

EPSS: 0.002 (4.8th percentile) — read the EPSS interpretation.

Affected products

  • Xpdf — versions Version

Weakness classification (CWE)

References