Buffer overflow in Xpdf

CVE-2025-3154

Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by an invalid VerticesPerRow value in a PDF shading dictionary.

Vulnerability class: Buffer Overflow

EPSS: 0.002 (5.1th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References